Function at 0x100d8860
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xa90
lea eax, [esp + 0x878]
push 0x108
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
call sub.KERNEL32.dll_GetProcessHeap
push 0x14
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db01d
lea ecx, [esp + 0x1c0]
mov edx, 0x14
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], 0x14
mov dword [esp + 0x1c8], 0
call fcn.10116c80
mov eax, dword [esp + 0x1c0]
mov ecx, dword [esp + 0x1c8]
movsd xmm0, qword [0x1042378e]
mov edx, dword [0x10423796]
movsd qword [eax + ecx + 8], xmm0
movsd xmm0, qword [0x10423786]
mov dword [eax + ecx + 0x10], edx
mov edx, 1
movsd qword [eax + ecx], xmm0
add ecx, 0x14
mov dword [esp + 0x2e8], 0
mov dword [esp + 0x2f0], 0x200
movsd xmm0, qword [esp + 0x1c0]
mov dword [esp + 0x2fc], ecx
lea ecx, [esp + 0x1c0]
movsd qword [esp + 0x2f4], xmm0
mov dword [esp + 0x300], 0
mov dword [esp + 0x308], 0
mov dword [esp + 0x310], 0
mov word [esp + 0x318], 0x101
mov byte [esp + 0x31a], 1
call fcn.10101930
mov eax, dword [esp + 0x1c0]
movsd xmm0, qword [esp + 0x1cc]
movsd xmm2, qword [esp + 0x1d4]
movsd xmm1, qword [esp + 0x1dc]
mov edi, dword [esp + 0x1c8]
mov ebx, dword [esp + 0x1c4]
cmp eax, 1
movsd qword [esp + 0x460], xmm0
movsd qword [esp + 0x468], xmm2
movsd qword [esp + 0x470], xmm1
jne 0x100d8af3
xor esi, esi
cmp bl, 3
je 0x100d89ec
call sub.KERNEL32.dll_GetProcessHeap
push 8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db183
mov esi, eax
mov dword [eax], ebx
mov dword [eax + 4], edi
call sub.KERNEL32.dll_GetProcessHeap
push 0x54
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db060
mov dword [eax], esi
mov dword [eax + 4], 0x10419048
mov edx, eax
movsd xmm0, qword [esp + 0x1c0]
movsd xmm1, qword [esp + 0x1c8]
movsd qword [eax + 8], xmm0
movsd qword [eax + 0x10], xmm1
movsd xmm0, qword [esp + 0x1d0]
movsd qword [eax + 0x18], xmm0
movsd xmm0, qword [esp + 0x1d8]
movsd qword [eax + 0x20], xmm0
movsd xmm0, qword [esp + 0x1e0]
movsd qword [eax + 0x28], xmm0
movsd xmm0, qword [esp + 0x1e8]
movsd qword [eax + 0x30], xmm0
mov ecx, dword [esp + 0x1f0]
mov dword [eax + 0x38], ecx
mov dword [eax + 0x3c], 2
movsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
movsd qword [eax + 0x40], xmm0
movsd qword [eax + 0x48], xmm1
mov word [eax + 0x50], 0
mov ecx, dword [esp + 0x978]
call fcn.100db390
cmp eax, 1
jne 0x100dac27
mov eax, dword [0x104debf8]
mov esi, edx
test eax, eax
je 0x100d8ab4
mov eax, dword [0x104debfc]
test esi, esi
je 0x100dac27
mov eax, dword [esi]
test eax, eax
je 0x100dabfc
mov ecx, dword [esi + 4]
push eax
call dword [ecx]
add esp, 4
mov eax, dword [esi + 4]
cmp dword [eax + 4], 0
je 0x100dabfc
mov edi, dword [esi]
cmp dword [eax + 8], 9
jae 0x100dabec
call sub.KERNEL32.dll_GetProcessHeap
push edi
jmp 0x100dabf4
mov eax, dword [esp + 0x1e4]
movsd xmm0, qword [esp + 0x470]
movsd xmm1, qword [esp + 0x460]
movsd xmm2, qword [esp + 0x468]
lea ecx, [esp + 0x1c0]
mov dword [esp + 0x464], edi
mov dword [esp + 0x460], ebx
mov edx, 1
mov dword [esp + 0xc], eax
lea eax, [esp + 0x460]
movsd qword [esp + 0x688], xmm0
movsd qword [esp + 0x680], xmm2
movsd qword [esp + 0x678], xmm1
movsd qword [esp + 0x468], xmm1
movsd qword [esp + 0x470], xmm2
movsd qword [esp + 0x478], xmm0
push eax
call fcn.10102400
add esp, 4
mov eax, dword [esp + 0x1c8]
movsd xmm0, qword [esp + 0x1cc]
mov edx, dword [esp + 0x1c0]
mov esi, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x1e4]
mov edi, dword [esp + 0x208]
mov ebx, dword [esp + 0x1fc]
mov dword [esp + 4], eax
movsd qword [esp + 0x980], xmm0
movsd xmm0, qword [esp + 0x1d4]
mov eax, dword [esp + 0x1dc]
cmp edx, 1
mov dword [esp + 0xdc], ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], edx
mov dword [esp + 0x70], esi
movsd qword [esp + 0x988], xmm0
mov dword [esp], eax
mov eax, dword [esp + 0x1e0]
movsd xmm0, qword [esp + 0x1ec]
movsd xmm1, qword [esp + 0x988]
mov dword [esp + 0x6c], eax
movsd qword [esp + 0x28], xmm0
movsd xmm0, qword [esp + 0x1f4]
mov eax, dword [esp + 0x1e8]
movsd qword [esp + 0x780], xmm1
movsd qword [esp + 0x30], xmm0
movsd xmm0, qword [esp + 0x980]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x204]
movsd xmm1, qword [esp + 0x30]
movsd qword [esp + 0x778], xmm0
movsd xmm0, qword [esp + 0x28]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x200]
movsd qword [esp + 0x50], xmm1
movsd qword [esp + 0x48], xmm0
mov dword [esp + 0x7c], eax
jne 0x100d8c97
cmp esi, 1
jne 0x100d8cd8
mov edi, dword [esp + 4]
lock inc dword [edi]
jle 0x100dafc3
mov dword [esp + 0x44], 1
mov esi, 1
jmp 0x100d8d15
cmp ecx, 1
jne 0x100d8cc0
mov edi, dword [esp + 8]
lock inc dword [edi]
jle 0x100dafc3
xor esi, esi
mov dword [esp + 0x44], 1
jmp 0x100d8d15
mov eax, dword [ebx + 4]
cmp eax, 0xffffffff
je 0x100d8cc0
lea ecx, [eax + 1]
lock cmpxchg dword [ebx + 4], ecx
jne 0x100d8cc3
mov edi, ebx
xor esi, esi
jmp 0x100d8d0d
mov eax, dword [esp]
mov eax, dword [eax + 4]
mov edi, dword [esp]
jmp 0x100d8cf6
mov eax, dword [esp]
mov eax, dword [eax + 4]
cmp eax, 0xffffffff
je 0x100d8cf0
lea ecx, [eax + 1]
lock cmpxchg dword [edi + 4], ecx
jne 0x100d8cf6
mov edi, dword [esp]
mov esi, 1
mov dword [esp + 0x44], 0
call sub.KERNEL32.dll_GetProcessHeap
push 0xc
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db06a
mov ecx, dword [esp + 0x44]
mov dword [eax], esi
mov dword [esp + 0xd8], eax
mov dword [eax + 4], ecx
mov dword [eax + 8], edi
call sub.KERNEL32.dll_GetProcessHeap
push 0x200
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db02e
mov esi, eax
call sub.KERNEL32.dll_GetProcessHeap
push 0x200
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db02e
mov dword [esp + 0xd4], eax
mov dword [esp + 0x44], esi
call sub.KERNEL32.dll_GetProcessHeap
push 4
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db074
mov dword [eax], 0
mov esi, eax
mov al, byte [esp + 0x1c2]
mov byte [esp + 0x462], al
movzx eax, word [esp + 0x1c0]
mov word [esp + 0x460], ax
call sub.KERNEL32.dll_GetProcessHeap
push 0x28
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100db07e
mov dword [eax], 1
mov dword [eax + 4], 1
mov dword [eax + 8], esi
mov byte [eax + 0xc], 0
mov edi, eax
mov edx, dword [esp + 0xd4]
mov ecx, dword [esp + 0xd8]
mov al, byte [esp + 0x462]
mov byte [edi + 0xf], al
movzx eax, word [esp + 0x460]
mov word [edi + 0xd], ax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], edx
mov dword [edi + 0x1c], 0x80
mov dword [edi + 0x20], ecx
mov dword [edi + 0x24], 0x104237ec
movsd xmm0, qword [esp + 0x778]
movsd xmm1, qword [esp + 0x780]
movsd qword [esp + 0x578], xmm0
movsd xmm0, qword [esp + 0x48]
movsd qword [esp + 0x580], xmm1
movsd xmm1, qword [esp + 0x50]
movsd qword [esp + 0x1c0], xmm0
xorps xmm0, xmm0
movsd qword [esp + 0x1c8], xmm1
movaps xmmword [esp + 0x460], xmm0
lock inc dword [edi]
jle 0x100dafc3
mov edx, dword [esp + 0x2f0]
lea ecx, [esp + 0x2e8]
call fcn.10102770
lock inc dword [eax]
mov esi, dword [esp + 8]
jle 0x100dafc3
movzx ecx, word [esp + 0x778]
mov dword [esp + 0xe8], 1
movsd xmm0, qword [esp + 0x578]
movsd xmm1, qword [esp + 0x580]
cmp dword [esp + 0x2f8], 0
mov word [esp + 0x178], cx
mov ecx, dword [esp + 0x20]
movsd qword [esp + 0x1b0], xmm1
movsd qword [esp + 0x1a8], xmm0
movsd xmm0, qword [esp + 0x1a8]
movsd xmm1, qword [esp + 0x1b0]
mov dword [esp + 0xf0], ecx
mov ecx, dword [esp + 0x70]
mov dword [esp + 0xf4], ecx
mov ecx, dword [esp + 4]
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp]
movsd qword [esp + 0x104], xmm1
movsd qword [esp + 0xfc], xmm0
movsd xmm0, qword [esp + 0x1c0]
movsd xmm1, qword [esp + 0x1c8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x6c]
movsd qword [esp + 0x190], xmm0
movsd qword [esp + 0x198], xmm1
movsd xmm0, qword [esp + 0x190]
movsd xmm1, qword [esp + 0x198]
mov dword [esp + 0x110], ecx
mov ecx, dword [esp + 0xdc]
mov dword [esp + 0x114], ecx
mov ecx, dword [esp + 0xe0]
mov dword [esp + 0x118], esi
movsd qword [esp + 0x11c], xmm0
movaps xmm0, xmmword [esp + 0x460]
movsd qword [esp + 0x124], xmm1
mov dword [esp + 0x12c], ebx
mov esi, dword [esp + 0x24]
mov dword [esp + 0x134], ecx
mov ecx, dword [esp + 0x7c]
movaps xmmword [esp + 0x80], xmm0
movsd xmm0, qword [esp + 0x80]
movsd xmm1, qword [esp + 0x88]
mov dword [esp + 0x130], ecx
mov ecx, dword [esp + 0x44]
movsd qword [esp + 0x140], xmm1
movsd qword [esp + 0x138], xmm0
mov dword [esp + 0x148], ecx
movzx ecx, word [esp + 0x178]
mov dword [esp + 0x14c], 0x80
mov dword [esp + 0x150], edi
mov byte [esp + 0x154], 0
mov word [esp + 0x155], cx
mov cl, byte [esp + 0x77a]
mov byte [esp + 0x17a], cl
mov cl, byte [esp + 0x17a]
mov byte [esp + 0x157], cl
mov dword [esp + 0x158], 1
mov dword [esp + 0x15c], edi
mov edi, dword [esp + 0xc]
mov dword [esp + 0x160], edi
mov dword [esp + 0x164], esi
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], edx
je 0x100d909d
mov esi, dword [esp + 0x2f4]
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0x308]
test eax, eax
je 0x100d90b9
lock dec dword [eax]
jne 0x100d90b9
lea ecx, [esp + 0x308]
call fcn.10116bf0
mov eax, dword [esp + 0x310]
test eax, eax
je 0x100d90d5
lock dec dword [eax]
jne 0x100d90d5
lea ecx, [esp + 0x310]
call fcn.10116bf0
lea esi, [esp + 0x980]
push 0x100
lea eax, [esp + 0x87c]
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x978]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x97c]
mov dword [esp], eax
mov eax, dword [0x104debf8]
cmp eax, 5
jb 0x100d9171
mov eax, dword [0x104d5390]
test eax, eax
jne 0x100d9124
mov ecx, 0x104d5390
call fcn.100f2650
push eax
call sub.KERNEL32.dll_TlsGetValue
cmp eax, 2
jb 0x100d9139
cmp dword [eax], 1
jne 0x100d9139
add eax, 4
jmp 0x100d9146
call fcn.100f27a0
test eax, eax
je 0x100db04c
mov ecx, eax
call fcn.100f2870
mov dword [esp + 0x1c0], eax
mov eax, dword [0x104debfc]
mov eax, dword [esp + 0x1c0]
lock dec dword [eax]
jne 0x100d9171
lea ecx, [esp + 0x1c0]
call fcn.100f2c20
lea edi, [esp + 0x778]
push 0x100
push esi
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x431]
movsd xmm1, qword [esp + 0x568]
mov ecx, dword [esp + 0x434]
movsd xmm0, qword [esp + 0x560]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x158]
movsd qword [esp + 0x440], xmm1
movsd xmm1, qword [esp + 0x570]
mov dword [esp + 0xa3], ecx
xor ecx, ecx
movsd qword [esp + 0x438], xmm0
test eax, eax
movsd qword [esp + 0x448], xmm1
je 0x100d9221
cmp eax, 1
je 0x100d9206
mov eax, dword [esp + 0x15c]
mov dword [esp + 0xc], eax
lock inc dword [eax]
jle 0x100dafc3
mov esi, 2
jmp 0x100d9223
mov eax, dword [esp + 0x15c]
mov dword [esp + 0xc], eax
lock inc dword [eax]
jle 0x100dafc3
mov esi, 1
jmp 0x100d9223
xor esi, esi
mov eax, dword [esp + 0x160]
cmp eax, 0xffffffff
je 0x100d9240
test eax, eax
je 0x100d9245
lock inc dword [eax + 4]
mov ecx, eax
jg 0x100d9245
jmp 0x100dafc3
mov ecx, 0xffffffff
mov eax, dword [esp + 0x164]
mov dword [esp + 8], ecx
mov ecx, edi
cmp eax, 0xffffffff
je 0x100d926a
xor ebx, ebx
test eax, eax
je 0x100d926f
lock inc dword [eax + 4]
mov ebx, eax
jg 0x100d926f
jmp 0x100dafc3
mov ebx, 0xffffffff
mov edi, dword [esp + 0x168]
lock inc dword [edi]
jle 0x100dafc3
lea eax, [esp + 0x578]
push 0x100
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xa0]
movsd xmm0, qword [esp + 0x438]
movsd xmm1, qword [esp + 0x440]
mov dword [esp + 0x2e8], esi
mov dword [esp + 0xa8], eax
mov eax, dword [esp + 0xa3]
movsd qword [esp + 0x178], xmm0
movsd xmm0, qword [esp + 0x448]
movsd qword [esp + 0x180], xmm1
mov dword [esp + 0xab], eax
mov eax, dword [esp + 0xc]
movsd qword [esp + 0x188], xmm0
mov dword [esp + 0x2ec], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2f0], eax
mov dword [esp + 0x2f4], ebx
mov dword [esp + 0x2f8], edi
call fcn.100ffb30
test eax, eax
je 0x100db088
mov ecx, dword [esp + 0x2f8]
movsd xmm0, qword [esp + 0x2e8]
movsd xmm1, qword [esp + 0x2f0]
mov dword [esp + 0x1d0], ecx
movsd qword [esp + 0x1c8], xmm1
movsd qword [esp + 0x1c0], xmm0
cmp dword [eax], 0
jne 0x100db099
movsd xmm0, qword [eax + 0x10]
mov ecx, dword [eax + 4]
mov edx, dword [esp + 0x1d0]
movsd qword [esp + 0x50], xmm0
cmp ecx, 4
movsd xmm0, qword [eax + 8]
movsd qword [esp + 0x48], xmm0
mov dword [eax + 0x14], edx
movsd xmm0, qword [esp + 0x1c0]
movsd xmm1, qword [esp + 0x1c8]
movsd qword [eax + 4], xmm0
movsd qword [eax + 0xc], xmm1
mov dword [eax], 0
je 0x100d9e09
movsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
lea esi, [esp + 0x678]
mov dword [esp + 0x41c], ecx
movsd qword [esp + 0x420], xmm0
movsd qword [esp + 0x428], xmm1
push 0x100
lea eax, [esp + 0x57c]
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xa8]
movsd xmm1, qword [esp + 0x180]
movsd xmm0, qword [esp + 0x178]
mov ecx, dword [esp + 0xab]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xe8]
movsd qword [esp + 0x88], xmm1
movsd xmm1, qword [esp + 0x188]
movsd qword [esp + 0x80], xmm0
mov dword [esp + 0x77], ecx
test eax, eax
movsd qword [esp + 0x90], xmm1
je 0x100d9cf1
cmp eax, 1
je 0x100d9589
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
jne 0x100db0b6
mov byte [eax], 1
push 0x100
push esi
lea eax, [esp + 0x2f0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
movsd xmm1, qword [esp + 0x88]
movsd xmm0, qword [esp + 0x80]
mov ecx, dword [esp + 0x77]
mov dword [esp + 0x3e8], eax
mov eax, dword [esp]
mov dword [esp + 0x3ec], eax
movsd qword [esp + 0x3f8], xmm1
movsd xmm1, qword [esp + 0x90]
mov eax, dword [esp + 0x74]
movsd qword [esp + 0x3f0], xmm0
movsd qword [esp + 0x400], xmm1
mov byte [esp + 0x408], 0
mov dword [esp + 0x409], eax
mov dword [esp + 0x40c], ecx
call fcn.10105a20
test eax, eax
je 0x100db219
mov eax, dword [eax]
lea ecx, [esp + 0x460]
lock inc dword [eax]
jle 0x100dafc3
add eax, 8
mov dword [esp + 0x48], ecx
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], 0x104248fc
push 0x128
lea eax, [esp + 0x2ec]
push eax
lea eax, [esp + 0x1c8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea esi, [esp + 0x48]
nop
call fcn.10103d00
test eax, eax
je 0x100d9e09
movzx ebx, word [eax]
lea ecx, [esp + 0x1c0]
mov edx, esi
mov edi, eax
mov word [eax], 0x8001
call fcn.100db5d0
test al, al
mov word [edi], bx
je 0x100d9e90
call fcn.10105a20
test eax, eax
je 0x100d9e94
mov ecx, dword [eax]
add ecx, 8
call fcn.100ff2c0
jmp 0x100d9540
lea edi, [esp + 0x138]
push 0x100
push esi
lea esi, [esp + 0x468]
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x88]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x77]
movsd xmm0, qword [esp + 0x80]
movsd xmm2, qword [edi]
movsd qword [esp + 0x198], xmm1
movsd xmm1, qword [esp + 0x90]
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0xb3], ecx
mov ecx, dword [esp + 0x14c]
movsd qword [esp + 0x190], xmm0
movsd qword [esp + 0x48], xmm2
movsd qword [esp + 0x1a0], xmm1
movsd xmm1, qword [edi + 8]
test eax, eax
mov dword [esp + 0x148], 0
movsd qword [esp + 0x50], xmm1
je 0x100db16f
movsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
mov edx, dword [esp + 0x150]
movsd qword [esp + 0xc8], xmm1
movsd qword [esp + 0xc0], xmm0
lock inc dword [edx]
jle 0x100dafc3
movsd xmm0, qword [esp + 0xc0]
movsd xmm1, qword [esp + 0xc8]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], 0
movsd qword [esp + 0x50], xmm0
movsd qword [esp + 0x58], xmm1
mov dword [esp + 0x60], eax
lea eax, [esp + 0xf0]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], eax
push 0x100
push esi
lea eax, [esp + 0x2f0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
movsd xmm1, qword [esp + 0x198]
movsd xmm0, qword [esp + 0x190]
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb3]
movsd qword [esp + 0x1b0], xmm1
movsd xmm1, qword [esp + 0x1a0]
mov dword [esp + 0xb8], eax
movsd qword [esp + 0x1a8], xmm0
mov dword [esp + 0xbb], ecx
movsd qword [esp + 0x1b8], xmm1
call fcn.100ff160
test eax, eax
je 0x100d9e09
mov ecx, dword [eax]
lea edx, [esp + 0x48]
mov dword [eax], edx
mov dword [esp + 0x7c], ecx
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
jne 0x100db0b6
mov byte [eax], 0
mov eax, dword [esp + 0x150]
add eax, 8
mov dword [esp + 0x414], eax
lea eax, [esp + 0x414]
mov dword [esp + 0x418], 0x104206fc
mov dword [esp + 0xe4], eax
push 0x100
lea eax, [esp + 0x2ec]
push eax
lea eax, [esp + 0x1c8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
movsd xmm1, qword [esp + 0x1b0]
movsd xmm0, qword [esp + 0x1a8]
mov ecx, dword [esp + 0xbb]
mov dword [esp + 0x2c0], eax
mov eax, dword [esp]
mov dword [esp + 0x2c4], eax
movsd qword [esp + 0x2d0], xmm1
movsd xmm1, qword [esp + 0x1b8]
mov eax, dword [esp + 0xb8]
movsd qword [esp + 0x2c8], xmm0
movsd qword [esp + 0x2d8], xmm1
mov byte [esp + 0x2e0], 0
mov dword [esp + 0x2e1], eax
mov dword [esp + 0x2e4], ecx
call fcn.10103d00
test eax, eax
je 0x100d9e09
mov edi, eax
mov dword [esp + 0x20], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
jmp 0x100d984a
mov dword [esp + 0x4c], 0
nop word cs:[eax + eax]
nop
lea ecx, [esp + 0x28]
lea edx, [esp + 0xf0]
call fcn.100e0e60
cmp dword [esp + 0x28], 2
jne 0x100dafc7
call fcn.10103d00
mov edi, eax
test eax, eax
je 0x100d9e09
movzx esi, word [edi]
lea ecx, [esp + 0x1c0]
lea edx, [esp + 0xe4]
mov word [edi], 0x8001
call fcn.100db5d0
test al, al
mov word [edi], si
je 0x100d9e4d
mov esi, 0x3d
nop word cs:[eax + eax]
nop
mov eax, dword [esp + 0x154]
mov ecx, eax
shl ecx, 5
add ecx, eax
inc al
neg ecx
mov byte [esp + 0x154], al
cmp cl, 9
jb 0x100d9900
cmp dword [esp + 0x4c], 0
jne 0x100daf38
mov dword [esp + 0x4c], 0xffffffff
mov eax, dword [esp + 0x58]
cmp eax, dword [esp + 0x5c]
je 0x100d98d9
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
lea ecx, [eax + 1]
dec edi
and edi, ecx
mov ecx, 0xffffffff
mov dword [esp + 0x58], edi
mov edi, dword [edx + eax*4]
test edi, edi
jne 0x100d98eb
lea ecx, [esp + 0x150]
call fcn.10107790
mov ecx, dword [esp + 0x4c]
mov edi, eax
inc ecx
test edi, edi
mov dword [esp + 0x4c], ecx
jne 0x100d9912
jmp 0x100d9820
lea ecx, [esp + 0x150]
call fcn.10107790
mov edi, eax
test eax, eax
je 0x100d9946
call fcn.10103d00
test eax, eax
je 0x100daf07
mov ebx, eax
movzx eax, word [eax]
mov word [ebx], 0x8001
mov word [esp], ax
mov eax, dword [edi + 0x14]
push edi
call dword [eax]
add esp, 4
movzx eax, word [esp]
dec esi
mov word [ebx], ax
jne 0x100d9880
jmp 0x100d9990
cmp dword [esp + 0x4c], 0
jne 0x100daf5b
mov dword [esp + 0x4c], 0xffffffff
mov eax, dword [esp + 0x58]
cmp eax, dword [esp + 0x5c]
je 0x100d980c
mov edi, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
lea ecx, [eax + 1]
dec edi
and edi, ecx
xor ecx, ecx
mov dword [esp + 0x58], edi
mov edi, dword [edx + eax*4]
jmp 0x100d98ec
cmp dword [esp + 0xf0], 1
jne 0x100d99c0
cmp dword [esp + 0xf4], 1
jne 0x100d9b42
mov ecx, dword [esp + 0xf8]
mov eax, 2
xor edx, edx
lock cmpxchg dword [ecx + 8], edx
jmp 0x100d983b
lea esi, [esp + 0xf8]
mov ecx, esi
call fcn.100e11c0
lea ecx, [esp + 0x28]
mov edx, esi
call fcn.1006dee0
mov eax, dword [esp + 0x28]
or eax, dword [esp + 0x2c]
je 0x100d9b9b
mov ebx, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
call fcn.100fe060
mov esi, dword [esp + 0x110]
mov dword [esp + 4], eax
mov dword [esp], edx
mov dword [esp + 0x24], ecx
push 0
push 0x3e8
mov dword [esp + 0x14], ebx
push ebx
mov dword [esp + 0x14], edi
push edi
call fcn.103541a0
mov edi, eax
mov ebx, edx
add edi, dword [esi + 8]
adc ebx, dword [esi + 0xc]
jb 0x100db009
push 0
push 0x3e8
push dword [esp + 0x14]
push dword [esp + 0x14]
call fcn.103539b0
imul eax, eax, 0xf4240
add eax, dword [esi + 0x10]
cmp eax, 0x3b9aca00
jb 0x100d9a61
add edi, 1
adc ebx, 0
jb 0x100db009
add eax, 0xc4653600
mov esi, ebx
mov dword [esp + 8], eax
mov eax, dword [esp + 4]
mov edx, edi
xor ecx, ecx
xor esi, dword [esp]
xor edx, eax
or esi, edx
mov edx, ebx
setne cl
cmp edi, eax
mov eax, dword [esp + 8]
sbb edx, dword [esp]
mov edx, 0xff
cmovb ecx, edx
test cl, cl
jne 0x100d9a9d
cmp eax, dword [esp + 0x24]
setne cl
jb 0x100d9bfb
cmp cl, 1
jne 0x100d9bfb
mov dword [esp + 0x450], edi
mov dword [esp + 0x454], ebx
mov dword [esp + 0x458], eax
mov eax, dword [esp]
lea ecx, [esp + 0x28]
lea edx, [esp + 0x450]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x10]
push eax
call fcn.100fe310
add esp, 4
mov eax, dword [esp + 0x28]
xor eax, 1
or eax, dword [esp + 0x2c]
jne 0x100db104
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov ecx, edx
or ecx, esi
or ecx, eax
mov ecx, 0
cmovne eax, ecx
cmovne esi, ecx
cmovne edx, ecx
cmp dword [esp + 0x114], 1
jne 0x100d9c80
mov ecx, dword [esp + 0x118]
add ecx, 8
push eax
push esi
call fcn.100ff4f0
add esp, 8
jmp 0x100d9ce0
lea eax, [esp + 0x28]
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 1
lea ecx, [esp + 0x10]
lea edx, [esp + 0xf8]
push eax
call fcn.10104890
add esp, 4
mov eax, dword [esp + 0x10]
cmp al, 3
je 0x100d983b
cmp al, 4
je 0x100d983b
jmp 0x100db118
cmp dword [esp + 0x114], 1
je 0x100d9c05
lea eax, [esp + 0x28]
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 1
lea ecx, [esp + 0x10]
lea edx, [esp + 0x118]
push eax
call fcn.10104890
add esp, 4
mov al, byte [esp + 0x10]
cmp al, 3
je 0x100d9bf5
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], ecx
mov esi, dword [esp + 0x20]
jmp 0x100d9c71
cmp dword [esp + 0x114], 1
jne 0x100d9c1d
mov ecx, dword [esp + 0x118]
mov eax, 2
xor edx, edx
lock cmpxchg dword [ecx + 8], edx
jmp 0x100d9ce0
lea eax, [esp + 0x28]
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 1
lea ecx, [esp + 0x10]
lea edx, [esp + 0x118]
push eax
call fcn.10104890
add esp, 4
mov al, byte [esp + 0x10]
cmp al, 3
je 0x100d9c6d
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x70], ecx
mov esi, dword [esp + 0x70]
mov ecx, eax
add cl, 0xfd
cmp cl, 2
jb 0x100d9ce0
jmp 0x100db11c
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 1
lea ecx, [esp + 0x10]
lea edx, [esp + 0x118]
push eax
call fcn.10104890
add esp, 4
mov al, byte [esp + 0x10]
cmp al, 3
je 0x100d9cc4
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], ecx
mov esi, dword [esp + 0x6c]
mov ecx, eax
add cl, 0xfd
cmp cl, 1
ja 0x100db11c
nop word cs:[eax + eax]
lea ecx, [esp + 0xf8]
call fcn.100e1570
jmp 0x100d983b
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
jne 0x100db0b6
mov byte [eax], 1
push 0x100
push esi
lea eax, [esp + 0x1c8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
movsd xmm0, qword [esp + 0x80]
movsd xmm1, qword [esp + 0x88]
mov ecx, dword [esp + 0x77]
mov dword [esp + 0x2c0], eax
mov eax, dword [esp]
mov dword [esp + 0x2c4], eax
movsd qword [esp + 0x2c8], xmm0
movsd xmm0, qword [esp + 0x90]
mov eax, dword [esp + 0x74]
movsd qword [esp + 0x2d0], xmm1
movsd qword [esp + 0x2d8], xmm0
mov byte [esp + 0x2e0], 0
mov dword [esp + 0x2e1], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x2e4], ecx
add eax, 8
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x4c], 0x104206ac
mov dword [esp + 0x28], eax
call fcn.10103d00
test eax, eax
je 0x100d9e09
mov esi, eax
lea edi, [esp + 0x28]
nop word [eax + eax]
movzx ebx, word [esi]
lea ecx, [esp + 0x1c0]
mov edx, edi
mov word [esi], 0x8001
call fcn.100db5d0
test al, al
mov word [esi], bx
je 0x100d9e26
lea ecx, [esp + 0x460]
lea edx, [esp + 0xf0]
call fcn.100e0e60
cmp dword [esp + 0x460], 2
jne 0x100daf6c
call fcn.10103d00
mov esi, eax
test eax, eax
jne 0x100d9dc0
lea eax, [esp + 0x10]
mov ecx, 0x1044ace7
mov edx, 0x46
push 0x1044ad30
push 0x10419488
jmp 0x100daf50
lea ecx, [esp + 0x1c0]
call fcn.100e0db0
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
jne 0x100d9ed4
jmp 0x100db038
lea ecx, [esp + 0x1c0]
call fcn.100e0db0
call fcn.10103db0
test eax, eax
je 0x100db156
cmp byte [eax], 2
je 0x100db038
mov byte [eax], 2
call fcn.100ff160
test eax, eax
je 0x100db156
mov ecx, dword [esp + 0x7c]
mov dword [eax], ecx
lea ecx, [esp + 0x48]
call fcn.100e17a0
jmp 0x100d9ed7
xor ebx, ebx
jmp 0x100d9e96
mov bl, 1
lea ecx, [esp + 0x1c0]
call fcn.100e0db0
mov eax, dword [esp + 0x464]
push dword [esp + 0x460]
call dword [eax + 0xc]
add esp, 4
test bl, bl
jne 0x100db225
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
je 0x100db038
mov byte [eax], 2
lea ecx, [esp + 0x41c]
call fcn.100ffa80
cmp dword [esp + 0x41c], 3
je 0x100d9ef9
lea ecx, [esp + 0x41c]
call fcn.100db540
mov eax, dword [0x104debf8]
cmp eax, 5
jb 0x100d9f63
mov eax, dword [0x104d5390]
test eax, eax
jne 0x100d9f16
mov ecx, 0x104d5390
call fcn.100f2650
push eax
call sub.KERNEL32.dll_TlsGetValue
cmp eax, 2
jb 0x100d9f2b
cmp dword [eax], 1
jne 0x100d9f2b
add eax, 4
jmp 0x100d9f38
call fcn.100f27a0
test eax, eax
je 0x100db04c
mov ecx, eax
call fcn.100f2870
mov dword [esp + 0x1c0], eax
mov eax, dword [0x104debfc]
mov eax, dword [esp + 0x1c0]
lock dec dword [eax]
jne 0x100d9f63
lea ecx, [esp + 0x1c0]
call fcn.100f2c20
lea eax, [esp + 0xe8]
push 0x90
push eax
lea eax, [esp + 0x1c8]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x1c0]
cmp eax, 1
je 0x100d9fc1
test eax, eax
jne 0x100da13e
lea ecx, [esp + 0x1c8]
call fcn.1006d590
mov eax, dword [esp + 0x210]
lock dec dword [eax]
jne 0x100da5e7
lea ecx, [esp + 0x210]
call fcn.101059c0
jmp 0x100da5e7
mov eax, dword [esp + 0x220]
movsd xmm0, qword [esp + 0x210]
movsd xmm1, qword [esp + 0x218]
mov ecx, dword [esp + 0x224]
mov dword [esp + 0x220], 0
test eax, eax
movsd qword [esp + 0x50], xmm1
movsd qword [esp + 0x48], xmm0
je 0x100db16f
movsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
mov edx, dword [esp + 0x228]
movsd qword [esp + 0xc8], xmm1
movsd qword [esp + 0xc0], xmm0
lock inc dword [edx]
jle 0x100dafc3
movsd xmm0, qword [esp + 0xc0]
movsd xmm1, qword [esp + 0xc8]
lea esi, [esp + 0x1c8]
mov dword [esp + 0x2e8], edx
mov dword [esp + 0x2ec], 0
movsd qword [esp + 0x2f0], xmm0
movsd qword [esp + 0x2f8], xmm1
mov dword [esp + 0x300], eax
mov dword [esp + 0x304], ecx
mov dword [esp + 0x308], esi
call fcn.100ff160
test eax, eax
je 0x100d9e09
mov edi, dword [eax]
lea ecx, [esp + 0x2e8]
mov dword [eax], ecx
nop dword [eax + eax]
cmp dword [esp + 0x2ec], 0
jne 0x100dafa9
mov dword [esp + 0x2ec], 0xffffffff
mov esi, dword [esp + 0x2f4]
test esi, esi
je 0x100da1b0
mov eax, dword [esi + 4]
mov dword [esp + 0x2f4], eax
mov eax, dword [esi + 4]
test eax, eax
je 0x100da0f0
mov dword [eax + 8], 0
jmp 0x100da0fb
mov dword [esp + 0x2f0], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
inc dword [esp + 0x2ec]
mov eax, dword [esi + 0x14]
push esi
call dword [eax + 0x10]
add esp, 4
mov eax, 0xffffffc0
lock xadd dword [esi], eax
and eax, 0xffffffc0
cmp eax, 0x40
jne 0x100da0a0
mov eax, dword [esi + 0x14]
push esi
call dword [eax + 4]
add esp, 4
jmp 0x100da0a0
mov esi, dword [esp + 0x1c4]
mov ecx, dword [esi + 0x10]
call fcn.100f4810
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100dae7d
xor eax, eax
mov cl, byte [esi + 0x14]
lea edi, [esi + 0x10]
test cl, cl
jne 0x100db242
cmp byte [esi + 0x20], 0
je 0x100da282
test al, al
jne 0x100da185
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100daedb
mov esi, dword [edi]
mov eax, dword [0x104dec60]
test eax, eax
je 0x100da52d
cmp eax, 0x100f30b0
jne 0x100da556
mov eax, dword [esi]
mov byte [eax + 0x18], 0
push eax
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x100da5cf
mov dword [esp + 0x2ec], 0xffffffff
mov dword [esp + 8], edi
mov edx, dword [esp + 0x304]
mov ecx, dword [esp + 0x2fc]
mov eax, dword [esp + 0x2f8]
lea edi, [edx - 1]
mov esi, ecx
mov ebx, edi
sub esi, eax
mov dword [esp], edi
and ebx, eax
and esi, edi
mov dword [esp + 0x2fc], ebx
add esi, eax
mov eax, dword [esp + 0x300]
and esi, edi
mov dword [esp + 0x460], esi
mov dword [esp + 0x464], ecx
cmp ebx, esi
lea ecx, [esp + 0x2f8]
mov dword [esp + 0x468], eax
mov dword [esp + 0x46c], edx
mov dword [esp + 0x470], ebx
mov dword [esp + 0x474], esi
mov dword [esp + 4], eax
mov dword [esp + 0x478], ecx
jne 0x100da248
jmp 0x100da2ec
cmp ebx, esi
je 0x100da2e5
mov eax, dword [esp + 4]
mov edi, dword [eax + ebx*4]
inc ebx
and ebx, dword [esp]
test edi, edi
je 0x100da2dc
mov eax, dword [edi + 0x14]
push edi
call dword [eax + 0x10]
add esp, 4
mov eax, 0xffffffc0
lock xadd dword [edi], eax
and eax, 0xffffffc0
cmp eax, 0x40
jne 0x100da240
mov eax, dword [edi + 0x14]
push edi
call dword [eax + 4]
add esp, 4
jmp 0x100da240
test al, al
mov byte [esi + 0x20], 1
jne 0x100da297
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100daef1
mov edi, dword [edi]
mov eax, dword [0x104dec60]
test eax, eax
jne 0x100da2c0
mov ecx, 0x10421629
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f30b0
cmovne eax, edx
mov dword [0x104dec60], eax
cmp eax, 0x100f30b0
jne 0x100da582
mov eax, dword [edi]
mov byte [eax + 0x18], 0
push eax
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x100da5ac
mov dword [esp + 0x470], ebx
jmp 0x100da2ec
mov dword [esp + 0x470], esi
lea edi, [esp + 0x460]
mov ecx, edi
call fcn.100e18e0
mov esi, dword [esp + 0x228]
inc dword [esp + 0x2ec]
mov ecx, dword [esi + 8]
call fcn.100f4810
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100dae89
mov dword [esp + 0x24], 0
lea eax, [esi + 8]
mov dword [esp + 0xc], eax
mov al, byte [esi + 0xc]
test al, al
jne 0x100db270
mov edx, dword [esi + 0x14]
mov ebx, dword [esi + 0x1c]
mov ecx, dword [esi + 0x10]
mov eax, esi
mov edi, edx
lea esi, [ebx - 1]
mov dword [esp + 0x20], ebx
sub edi, ecx
mov ebx, esi
mov dword [esp], esi
and edi, esi
and ebx, ecx
add edi, ecx
mov dword [eax + 0x14], ebx
and edi, esi
mov ecx, dword [eax + 0x18]
mov esi, eax
add eax, 0x10
mov dword [esp + 0x460], edi
mov dword [esp + 0x464], edx
mov edx, dword [esp + 0x20]
cmp ebx, edi
mov dword [esp + 0x468], ecx
mov dword [esp + 4], ecx
mov dword [esp + 0x46c], edx
mov dword [esp + 0x470], ebx
mov dword [esp + 0x474], edi
mov dword [esp + 0x478], eax
je 0x100da3fe
mov dword [esp + 0x20], esi
jmp 0x100da3b4
cmp ebx, edi
je 0x100da3f3
mov eax, dword [esp + 4]
mov esi, dword [eax + ebx*4]
inc ebx
and ebx, dword [esp]
test esi, esi
je 0x100da3ea
mov eax, dword [esi + 0x14]
push esi
call dword [eax + 0x10]
add esp, 4
mov eax, 0xffffffc0
lock xadd dword [esi], eax
and eax, 0xffffffc0
cmp eax, 0x40
jne 0x100da3b0
mov eax, dword [esi + 0x14]
push esi
call dword [eax + 4]
add esp, 4
jmp 0x100da3b0
mov dword [esp + 0x470], ebx
jmp 0x100da3fa
mov dword [esp + 0x470], edi
mov esi, dword [esp + 0x20]
lea ecx, [esp + 0x460]
call fcn.100e18e0
cmp byte [esp + 0x24], 0
jne 0x100da41e
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100daec5
mov eax, dword [esp + 0xc]
lea edi, [esp + 0x1c8]
mov esi, dword [eax]
mov eax, dword [0x104dec60]
mov ebx, dword [esp + 8]
test eax, eax
je 0x100da44d
cmp eax, 0x100f30b0
jne 0x100da472
mov eax, dword [esi]
mov byte [eax + 0x18], 0
push eax
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x100da49c
mov ecx, 0x10421629
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f30b0
cmovne eax, edx
mov dword [0x104dec60], eax
cmp eax, 0x100f30b0
je 0x100da43f
mov eax, dword [0x104dec78]
test eax, eax
jne 0x100da499
mov ecx, 0x10421918
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f4ef0
cmovne eax, edx
mov dword [0x104dec78], eax
push esi
call eax
mov eax, dword [esp + 0x2ec]
lea ecx, [eax + 1]
test ecx, ecx
jle 0x100db2a0
mov dword [esp + 0x2ec], ecx
cmp dword [esp + 0x2f0], 0
jne 0x100db2bd
cmp dword [esp + 0x2f4], 0
jne 0x100db2d5
mov dword [esp + 0x2ec], eax
call fcn.100ff160
test eax, eax
je 0x100da8cb
lea ecx, [esp + 0x2e8]
mov dword [eax], ebx
call fcn.100e17a0
cmp dword [esp + 0x220], 0
je 0x100da509
lea ecx, [esp + 0x218]
call fcn.10070230
mov eax, dword [esp + 0x228]
lock dec dword [eax]
jne 0x100da521
lea ecx, [esp + 0x228]
call fcn.10069c70
mov ecx, edi
call fcn.1006d590
jmp 0x100da5e7
mov ecx, 0x10421629
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f30b0
cmovne eax, edx
mov dword [0x104dec60], eax
cmp eax, 0x100f30b0
je 0x100da19f
mov eax, dword [0x104dec78]
test eax, eax
jne 0x100da57d
mov ecx, 0x10421918
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f4ef0
cmovne eax, edx
mov dword [0x104dec78], eax
push esi
call eax
jmp 0x100da5cf
mov eax, dword [0x104dec78]
test eax, eax
jne 0x100da5a9
mov ecx, 0x10421918
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f4ef0
cmovne eax, edx
mov dword [0x104dec78], eax
push edi
call eax
mov eax, dword [esi + 0xc]
test eax, eax
je 0x100da5cf
mov esi, dword [esi + 8]
shl eax, 2
lea edi, [eax + eax*2]
add esi, 8
nop
mov ecx, esi
call fcn.10104200
add esi, 0xc
add edi, 0xfffffff4
jne 0x100da5c0
mov eax, dword [esp + 0x1c4]
lock dec dword [eax]
jne 0x100da5e7
lea ecx, [esp + 0x1c4]
call fcn.10069d40
lea ecx, [esp + 0x230]
call fcn.100db540
mov edi, dword [esp + 0x244]
mov ecx, dword [edi + 8]
call fcn.100f4810
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100dac9b
xor ebx, ebx
mov al, byte [edi + 0xc]
lea esi, [edi + 8]
test al, al
jne 0x100db0d6
cmp byte [edi + 0x44], 0
je 0x100da661
test bl, bl
jne 0x100da636
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100dae99
mov esi, dword [esi]
mov eax, dword [0x104dec60]
test eax, eax
je 0x100da764
cmp eax, 0x100f30b0
jne 0x100da78d
mov eax, dword [esi]
mov byte [eax + 0x18], 0
push eax
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x100dad94
mov byte [edi + 0x44], 1
mov dword [esp], esi
lea esi, [edi + 0x2c]
mov eax, dword [edi + 0x2c]
test eax, eax
je 0x100da67e
lock dec dword [eax]
jne 0x100da67e
mov ecx, esi
call fcn.10100330
mov dword [esi], 0
mov eax, dword [esp + 0x244]
mov esi, dword [eax + 0x48]
mov eax, dword [0x104decf8]
test eax, eax
jne 0x100da6b5
mov ecx, 0x10422ec1
mov edx, 0x18
call fcn.100f2ce0
test eax, eax
mov eax, 0x100fe5a0
cmovne eax, edx
mov dword [0x104decf8], eax
push esi
call eax
movsd xmm0, qword [edi + 0x3c]
mov eax, dword [edi + 0x30]
test bl, bl
movsd qword [esp + 0x580], xmm0
mov dword [esp + 4], eax
movsd xmm0, qword [edi + 0x34]
movsd qword [esp + 0x578], xmm0
mov dword [edi + 0x30], 4
mov dword [edi + 0x38], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x3c], 0
mov dword [esp + 0x460], eax
movsd xmm0, qword [esp + 0x578]
movsd xmm1, qword [esp + 0x580]
movsd qword [esp + 0x464], xmm0
movsd qword [esp + 0x46c], xmm1
jne 0x100da73a
mov eax, dword [0x104dec50]
test eax, eax
jne 0x100daeaf
mov eax, dword [esp]
mov esi, dword [eax]
mov eax, dword [0x104dec60]
test eax, eax
je 0x100da7bc
cmp eax, 0x100f30b0
jne 0x100da7e5
mov eax, dword [esi]
mov byte [eax + 0x18], 0
push eax
call sub.KERNEL32.dll_LeaveCriticalSection
jmp 0x100da80f
mov ecx, 0x10421629
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f30b0
cmovne eax, edx
mov dword [0x104dec60], eax
cmp eax, 0x100f30b0
je 0x100da650
mov eax, dword [0x104dec78]
test eax, eax
jne 0x100da7b4
mov ecx, 0x10421918
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f4ef0
cmovne eax, edx
mov dword [0x104dec78], eax
push esi
call eax
jmp 0x100dad94
mov ecx, 0x10421629
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f30b0
cmovne eax, edx
mov dword [0x104dec60], eax
cmp eax, 0x100f30b0
je 0x100da753
mov eax, dword [0x104dec78]
test eax, eax
jne 0x100da80c
mov ecx, 0x10421918
mov edx, 0x17
call fcn.100f2ce0
test eax, eax
mov eax, 0x100f4ef0
cmovne eax, edx
mov dword [0x104dec78], eax
push esi
call eax
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
jne 0x100dad6e
mov byte [eax], 0
call fcn.10105a20
test eax, eax
je 0x100da8fc
mov eax, dword [eax]
lock inc dword [eax]
jle 0x100dafc3
add eax, 8
lea ecx, [esp + 0x248]
mov dword [esp + 0x2e8], eax
lea eax, [esp + 0x2e8]
mov dword [esp + 0x2ec], 0x104248fc
mov dword [esp + 0x678], ecx
mov dword [esp + 0x578], eax
call fcn.10103d00
test eax, eax
je 0x100da8cb
mov ebx, eax
lea edi, [esp + 0x578]
nop word [eax + eax]
movzx esi, word [ebx]
lea ecx, [esp + 0x678]
mov edx, edi
mov word [ebx], 0x8001
call fcn.10105b80
cmp al, 2
mov word [ebx], si
jne 0x100da8e8
call fcn.10105a20
test eax, eax
je 0x100da8e8
mov ecx, dword [eax]
add ecx, 8
call fcn.100ff2c0
call fcn.10103d00
mov ebx, eax
test eax, eax
jne 0x100da890
lea eax, [esp + 0x10]
mov ecx, 0x1044ace7
mov edx, 0x46
push 0x1044ad30
push 0x10423110
jmp 0x100daf50
mov eax, dword [esp + 0x2ec]
push dword [esp + 0x2e8]
call dword [eax + 0xc]
add esp, 4
call fcn.10103db0
test eax, eax
je 0x100da8cb
cmp byte [eax], 2
mov ecx, dword [esp + 4]
je 0x100db038
mov byte [eax], 2
mov dword [esp + 0x46c], 0
mov dword [esp + 0x470], 0
mov eax, dword [esp + 0x468]
mov dword [esp + 0x468], 0
lea edx, [eax + eax*4]
test eax, eax
lea esi, [ecx + edx*4]
mov dword [esp], esi
je 0x100dabd3
lea eax, [ecx + edx*4]
lea ebx, [esp + 0x67c]
mov edi, ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
add edi, 0x14
nop word cs:[eax + eax]
nop
mov edx, dword [edi - 4]
mov ecx, dword [edi - 0x14]
mov eax, dword [edi - 0x10]
mov dword [esp + 0x680], edx
cmp ecx, 2
movsd xmm0, qword [edi - 0xc]
movsd qword [esp + 0x678], xmm0
je 0x100daae3
mov edx, dword [esp + 0x680]
movsd xmm0, qword [esp + 0x678]
cmp ecx, 1
mov dword [esp + 0x2f0], edx
movsd qword [esp + 0x2e8], xmm0
je 0x100da9ce
lea eax, [edi - 0x14]
add edi, 0x14
add eax, 0x14
cmp eax, esi
jne 0x100da970
jmp 0x100daae1
mov ecx, dword [esp + 0x2f0]
movsd xmm0, qword [esp + 0x2e8]
cmp eax, 2
mov dword [esp + 0x580], ecx
movsd qword [esp + 0x578], xmm0
je 0x100daae3
mov ecx, dword [esp + 0x580]
movsd xmm0, qword [esp + 0x578]
test eax, eax
mov dword [ebx + 8], ecx
movsd qword [ebx], xmm0
mov dword [esp + 0x780], ecx
movsd qword [esp + 0x778], xmm0
mov esi, dword [esp + 0x67c]
mov dword [esp + 0x678], 0
je 0x100db194
push 0xffffffffffffffff
push esi
call sub.KERNEL32.dll_WaitForSingleObject
cmp eax, 0xffffffff
je 0x100db1a8
push esi
call sub.KERNEL32.dll_CloseHandle
mov eax, dword [esp + 0x684]
mov ecx, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov esi, dword [eax + 0x10]
mov dword [eax + 8], 0
cmp ecx, 1
jne 0x100db31d
mov eax, dword [esp + 0x680]
lock dec dword [eax]
jne 0x100daa87
lea ecx, [esp + 0x680]
call fcn.100f2c20
mov eax, dword [esp + 0x684]
lock dec dword [eax]
jne 0x100daa9f
lea ecx, [esp + 0x684]
call fcn.1003a3e0
test ebx, ebx
je 0x100daacd
push ebx
call dword [esi]
add esp, 4
cmp dword [esi + 4], 0
je 0x100daacd
cmp dword [esi + 8], 9
jae 0x100daabd
call sub.KERNEL32.dll_GetProcessHeap
push ebx
jmp 0x100daac5
call sub.KERNEL32.dll_GetProcessHeap
push dword [ebx - 4]
push 0
push eax
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0xc], edi
mov esi, dword [esp]
lea ebx, [esp + 0x67c]
jne 0x100da962
mov edi, esi
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
cmp edi, esi
je 0x100dabdd
movsd xmm0, qword [edi + 0xc]
mov eax, dword [edi]
lea ebx, [edi + 0x14]
movsd qword [esp + 0x50], xmm0
cmp eax, 2
movsd xmm0, qword [edi + 4]
movsd qword [esp + 0x48], xmm0
je 0x100dabc4
lea esi, [esp + 0x2f4]
lea edi, [ecx + edx*4]
nop word cs:[eax + eax]
nop dword [eax + eax]
movsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
test eax, eax
mov dword [esp + 0x2e8], eax
movsd qword [esi], xmm1
movsd qword [esi - 8], xmm0
je 0x100dab91
cmp dword [esp + 0x2ec], 0
je 0x100dab66
push dword [esp + 0x2f0]
call sub.KERNEL32.dll_CloseHandle
mov eax, dword [esp + 0x2f4]
lock dec dword [eax]
jne 0x100dab79
mov ecx, esi
call fcn.100f2c20
mov eax, dword [esp + 0x2f8]
lock dec dword [eax]
jne 0x100dab91
lea ecx, [esp + 0x2f8]
call fcn.1003a3e0
cmp edi, ebx
je 0x100dacaa
movsd xmm0, qword [ebx + 0xc]
mov eax, dword [ebx]
lea ecx, [ebx + 0x14]
movsd qword [esp + 0x50], xmm0
cmp eax, 2
movsd xmm0, qword [ebx + 4]
mov ebx, ecx
movsd qword [esp + 0x48], xmm0
jne 0x100dab30
mov esi, dword [esp]
mov ebx, ecx
mov edi, esi
cmp ebx, edi
jne 0x100dacb7
jmp 0x100dad88
mov edi, ecx
cmp edi, esi
jne 0x100daaf3
mov ebx, edi
cmp ebx, edi
jne 0x100dacb7
jmp 0x100dad88
call sub.KERNEL32.dll_GetProcessHeap
push dword [edi - 4]
push 0
push eax
call sub.KERNEL32.dll_HeapFree
cmp dword [esi + 0x3c], 2
je 0x100dac19
cmp dword [esi + 0xc], 0
je 0x100dac19
mov edi, dword [esi + 8]
call sub.KERNEL32.dll_GetProcessHeap
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x2f8], 0
je 0x100dac46
mov esi, dword [esp + 0x2f4]
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0x308]
test eax, eax
je 0x100dac62
lock dec dword [eax]
jne 0x100dac62
lea ecx, [esp + 0x308]
call fcn.10116bf0
mov eax, dword [esp + 0x310]
test eax, eax
je 0x100dac7e
lock dec dword [eax]
jne 0x100dac7e
lea ecx, [esp + 0x310]
call fcn.10116bf0
lea ecx, [esp + 0x878]
call fcn.100e1a30
lea ecx, [esp + 0x97c]
call fcn.100e1c60
jmp 0x100dae71
call fcn.100fa7c0
mov ebx, eax
xor bl, 1
jmp 0x100da611
mov ebx, dword [esp]
mov edi, ebx
cmp ebx, edi
je 0x100dad88
lea esi, [esp + 0x2f4]
lea edi, [esp + 0x2f8]
jmp 0x100dacdc
add ebx, 0x14
cmp ebx, dword [esp]
je 0x100dad88
movsd xmm0, qword [ebx + 0xc]
mov eax, dword [ebx]
movsd qword [esp + 0x780], xmm0
cmp eax, 2
movsd xmm0, qword [ebx + 4]
movsd qword [esp + 0x778], xmm0
je 0x100dad88
movsd xmm0, qword [esp + 0x778]
movsd xmm1, qword [esp + 0x780]
test eax, eax
mov dword [esp + 0x2e8], eax
movsd qword [esi], xmm1
movsd qword [esi - 8], xmm0
je 0x100dacd0
cmp dword [esp + 0x2ec], 0
je 0x100dad3f
push dword [esp + 0x2f0]
call sub.KERNEL32.dll_CloseHandle
mov eax, dword [esp + 0x2f4]
lock dec dword [eax]
jne 0x100dad52
mov ecx, esi
call fcn.100f2c20
mov eax, dword [esp + 0x2f8]
lock dec dword [eax]
jne 0x100dacd0
mov ecx, edi
call fcn.1003a3e0
jmp 0x100dacd0
mov eax, dword [0x104dec50]
test eax, eax
je 0x100db36d
call fcn.100fa7c0
test al, al
jne 0x100db36d
lea ecx, [esp + 0x460]
call fcn.101003a0
mov eax, dword [esp + 0x244]
lock dec dword [eax]
jne 0x100dadac
lea ecx, [esp + 0x244]
call fcn.1003a150
mov ecx, dword [esp + 0x248]
test ecx, ecx
je 0x100dae07
mov eax, dword [ecx + 8]
lea esi, [esp + 0x248]
nop word cs:[eax + eax]
nop
mov edx, eax
or edx, 4
lock cmpxchg dword [ecx + 8], edx
jne 0x100dadd0
and eax, 0xa
cmp eax, 8
jne 0x100dadf0
mov eax, dword [ecx + 0x10]
push dword [ecx + 0xc]
call dword [eax + 8]
add esp, 4
mov eax, dword [esp + 0x248]
test eax, eax
je 0x100dae07
lock dec dword [eax]
jne 0x100dae07
mov ecx, esi
call fcn.100e19e0
mov eax, dword [0x104debf8]
cmp eax, 5
jb 0x100dae71
mov eax, dword [0x104d5390]
test eax, eax
jne 0x100dae24
mov ecx, 0x104d5390
call fcn.100f2650
push eax
call sub.KERNEL32.dll_TlsGetValue
cmp eax, 2
jb 0x100dae39
cmp dword [eax], 1
jne 0x100dae39
add eax, 4
jmp 0x100dae46
call fcn.100f27a0
test eax, eax
je 0x100db04c
mov ecx, eax
call fcn.100f2870
mov dword [esp + 0x1c0], eax
mov eax, dword [0x104debfc]
mov eax, dword [esp + 0x1c0]
lock dec dword [eax]
jne 0x100dae71
lea ecx, [esp + 0x1c0]
call fcn.100f2c20
lea eax, [esp + 0x10]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.100fa7c0
xor al, 1
jmp 0x100da15c
call fcn.100fa7c0
xor al, 1
mov dword [esp + 0x24], eax
jmp 0x100da325
call fcn.100fa7c0
test al, al
jne 0x100da636
mov byte [edi + 0xc], 1
jmp 0x100da636
call fcn.100fa7c0
test al, al
jne 0x100da73a
mov byte [edi + 0xc], 1
jmp 0x100da73a
call fcn.100fa7c0
test al, al
jne 0x100da41e
mov byte [esi + 0xc], 1
jmp 0x100da41e
call fcn.100fa7c0
test al, al
jne 0x100da185
mov byte [esi + 0x14], 1
jmp 0x100da185
call fcn.100fa7c0
test al, al
jne 0x100da297
mov byte [esi + 0x14], 1
jmp 0x100da297
mov eax, 0xffffffc0
lock xadd dword [edi], eax
and eax, 0xffffffc0
cmp eax, 0x40
jne 0x100daf22
mov eax, dword [edi + 0x14]
push edi
call dword [eax + 4]
add esp, 4
mov ecx, 0x1044ace7
mov edx, 0x46
push 0x1044ad30
push 0x10419488
jmp 0x100daf4c
mov ecx, str.already_borrowed
mov edx, 0x10
push 0x1042072c
push 0x10420674
lea eax, [esp + 0x18]
push eax
call fcn.1000a790
add esp, 0xc
ud2
mov ecx, str.already_borrowed
mov edx, 0x10
push 0x1042073c
jmp 0x100daf47
mov eax, dword [esp + 0x468]
movsd xmm0, qword [esp + 0x460]
mov ecx, 0x1044a65b
mov edx, 0x2b
mov dword [esp + 0x2f0], eax
movsd qword [esp + 0x2e8], xmm0
push 0x104206cc
push 0x104206bc
lea eax, [esp + 0x2f0]
jmp 0x100daf50
lea eax, [esp + 0x10]
mov ecx, str.already_borrowed
mov edx, 0x10
push 0x1042075c
push 0x10420674
jmp 0x100daf50
ud2
mov al, byte [esp + 0x2c]
cmp al, 3
ja 0x100dafd7
cmp al, 2
jne 0x100db30c
mov esi, dword [esp + 0x30]
mov eax, dword [esi + 4]
push dword [esi]
call dword [eax]
add esp, 4
mov eax, dword [esi + 4]
cmp dword [eax + 4], 0
je 0x100db2fe
mov edi, dword [esi]
cmp dword [eax + 8], 9
jae 0x100db2ee
call sub.KERNEL32.dll_GetProcessHeap
push edi
jmp 0x100db2f6
mov ecx, str.overflow_when_adding_duration_to_instant
mov edx, 0x28
push 0x10422f14
jmp 0x100db363
mov ecx, 0x14
mov edx, 1
call fcn.10006540
ud2
mov ecx, 0x200
jmp 0x100db188
mov ecx, str.assertion_failed:_c.get__.is_entered__
mov edx, 0x26
push 0x10424108
jmp 0x100db0cc
mov ecx, 0x1042153f
mov edx, 0x5e
push 0x104215a0
jmp 0x100db363
mov ecx, 0x54
jmp 0x100db188
mov ecx, 0xc
jmp 0x100db188
mov ecx, 4
jmp 0x100db188
mov ecx, 0x28
jmp 0x100db188
lea ecx, [esp + 0x2e8]
call fcn.100db540
jmp 0x100d9e09
lea eax, [esp + 0x10]
mov ecx, str.already_borrowed
mov edx, 0x10
push 0x104237a0
push 0x10420674
jmp 0x100daf50
xor ecx, ecx
call fcn.10103e60
mov ecx, str.Cannot_start_a_runtime_from_within_a_runtime._This_happens_because_a_function__like__block_on___attempted_to_block_the_current_thread_while_the_thread_is_being_used_to_drive_asynchronous_tasks.
mov edx, 0xc1
push 0x10424088
call fcn.100ff9a0
add esp, 4
ud2
mov ecx, 0x1044a65b
mov edx, 0x2b
mov dword [esp + 0x2e8], esi
mov byte [esp + 0x2ec], bl
push 0x1042484c
push 0x10423884
lea eax, [esp + 0x2f0]
jmp 0x100daf50
mov ecx, 0x10422dcf
mov edx, 0x23
push 0x10422df4
jmp 0x100db363
mov esi, dword [esp + 0x14]
cmp al, 3
ja 0x100db128
cmp al, 2
jne 0x100db354
mov eax, dword [esi + 4]
push dword [esi]
call dword [eax]
add esp, 4
mov eax, dword [esi + 4]
cmp dword [eax + 4], 0
je 0x100db346
mov edi, dword [esi]
cmp dword [eax + 8], 9
jae 0x100db336
call sub.KERNEL32.dll_GetProcessHeap
push edi
jmp 0x100db33e
mov ecx, 0x1044ace7
mov edx, 0x46
push 0x1044ad30
push 0x10423110
jmp 0x100daf4c
mov ecx, 0x104206dc
mov edx, 0xd
push 0x104206ec
jmp 0x100db363
mov ecx, 8
mov edx, 4
call fcn.10006540
ud2
mov ecx, str.called__Option::unwrap____on_a__None__valueC:UsersAdministrator.cargo_registry_srcgithub.com_1ecc6299db9ec823url_2.2.0_srclib.rs__filed
mov edx, 0x2b
push 0x1042490c
jmp 0x100db32c
call sub.KERNEL32.dll_GetLastError
lea edx, [esp + 0x578]
lea ecx, [esp + 0x48]
mov dword [esp + 0x2e8], 0x104230b8
mov dword [esp + 0x2ec], 1
mov dword [esp + 0x2f0], 0
mov byte [esp + 0x578], 0
mov dword [esp + 0x57c], eax
mov dword [esp + 0x48], edx
mov dword [esp + 0x2f8], ecx
lea ecx, [esp + 0x2e8]
mov edx, 0x104230c0
mov dword [esp + 0x4c], fcn.100f8fb0
mov dword [esp + 0x2fc], 1
call fcn.100f9210
ud2
lea ecx, [esp + 0x2e8]
call fcn.100e0db0
lea eax, [esp + 0x10]
mov ecx, str.failed_to_park_thread
mov edx, 0x15
push 0x1042069c
push 0x1041dfc8
jmp 0x100daf50
mov ecx, 0x1044a65b
mov edx, 0x2b
mov dword [esp + 0x2e8], edi
mov byte [esp + 0x2ec], al
push 0x10424a7c
push 0x104234a4
lea eax, [esp + 0x2f0]
jmp 0x100daf50
mov eax, dword [esp + 0xc]
mov ecx, 0x1044a65b
mov edx, 0x2b
mov dword [esp + 0x460], eax
mov eax, dword [esp + 0x24]
mov byte [esp + 0x464], al
push 0x1042077c
push 0x1042076c
push edi
jmp 0x100daf51
lea eax, [esp + 0x10]
mov ecx, 0x10424705
mov edx, 0x18
push 0x1042079c
push 0x1042078c
jmp 0x100daf50
mov ecx, 0x104207ac
mov edx, 0x39
mov dword [esp + 0x2ec], eax
push 0x104207e8
jmp 0x100db2e4
mov ecx, str.assertion_failed:_self.tail.is_none__
mov edx, 0x25
push 0x104240c0
call fcn.1004d560
add esp, 4
ud2
call sub.KERNEL32.dll_GetProcessHeap
push dword [edi - 4]
push 0
push eax
call sub.KERNEL32.dll_HeapFree
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov ecx, str.failed_to_park
mov edx, 0xe
push 0x1042074c
jmp 0x100db363
mov ecx, str.called__Option::unwrap____on_a__None__valueC:UsersAdministrator.cargo_registry_srcgithub.com_1ecc6299db9ec823url_2.2.0_srclib.rs__filed
mov edx, 0x2b
push 0x1042491c
call fcn.100082b0
add esp, 4
ud2
call sub.KERNEL32.dll_GetProcessHeap
push dword [edi - 4]
push 0
push eax
call sub.KERNEL32.dll_HeapFree
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov ecx, str.failed_to_park
mov edx, 0xe
push 0x1042071c
call fcn.1000a730
add esp, 4
ud2
mov ecx, 0x1042485c
mov edx, 0x8d
push 0x104248ec
jmp 0x100db0cc