Function at 0x100089a0
Capabilities:
Allocate or change rwx memory
Check for software breakpoints
Execute shellcode via indirect call
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f2a0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x540
mov eax, dword [0x100ae940]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movzx eax, byte [0x10090248]
cmp dword [0x100b0ed8], eax
je 0x100071cf
call fcn.100057b0
call fcn.1000b240
movzx eax, byte [0x10090248]
mov dword [0x100b0ed8], eax
mov eax, dword [0x100b0fa4]
add eax, 0x7e6e90
push eax
push dword [0x100b0f18]
call fcn.10009c70
add esp, 8
mov eax, dword [0x100b0fa4]
lea ecx, [ebp - 0x18]
add eax, 0x17ea030
push eax
call fcn.10003300
mov eax, dword [ebp - 0x18]
push 1
mov al, byte [eax]
mov byte [ebp - 0x18], al
mov eax, dword [0x100b0fa4]
add eax, 0x93b13c
cmp byte [0x10090248], 0
je 0x10008601
push dword [ebp - 0x18]
push ecx
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001700
mov eax, dword [0x100b0ff8]
lea ecx, [ebp - 0x500]
add esp, 0xc
mov edi, dword [eax + 0x60]
push dword [0x100b1010]
call fcn.100027f0
lea ecx, [ebp - 0x500]
call fcn.1000e200
mov esi, eax
mov dword [ebp - 0x518], esi
test edi, edi
jne 0x10007260
cmp byte [0x100afa61], 0
jne 0x10008614
mov byte [0x100afa61], 1
jmp 0x10008614
cmp byte [0x100afa61], 0
je 0x100072bf
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x100072bf
mov ecx, edi
call fcn.1000e210
mov esi, dword [edi + 0x75c]
sub esp, 0x18
mov ecx, esp
xorps xmm0, xmm0
push 6
movups xmmword [ecx], xmm0
push str.Raiden
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100018d0
push esi
call fcn.10009500
mov esi, dword [ebp - 0x518]
add esp, 0x1c
mov byte [0x100afa61], 0
mov eax, dword [edi + 0x618]
cmp eax, 0x10001c
je 0x100072d3
cmp eax, 0x10001f
jne 0x100072e7
push dword [0x100b0f84]
push dword [0x100b0f18]
call fcn.10009c70
add esp, 8
mov eax, dword [edi + 0x618]
cmp eax, 0x10001c
je case.default.0x10007311
cmp eax, 0x10001f
je case.default.0x10007311
mov eax, dword [0x100b0fb0]
cmp eax, 3
ja case.default.0x10007311
jmp dword [eax*4 + 0x10008634]
cmp esi, 0x750
je 0x10007352
cmp esi, 0x740
je 0x10007352
cmp esi, 0x730
je 0x10007352
mov eax, dword [0x100b0fa4]
add eax, 0x7e6e90
push eax
push dword [0x100b0ef4]
call fcn.10009c70
mov eax, dword [0x100b0fa4]
add eax, 0x7e6e90
jmp 0x100073d1
mov eax, dword [0x100b0fa4]
add eax, 0x46bc60
push eax
push dword [0x100b0f18]
call fcn.10009c70
add esp, 8
jmp case.default.0x10007311
mov eax, dword [0x100b0fa4]
add eax, 0x46bc60
push eax
push dword [0x100b0ef4]
call fcn.10009c70
mov eax, dword [0x100b0fa4]
add eax, 0x46bc60
jmp 0x100073d1
mov eax, dword [0x100b0fa4]
add eax, 0x1ee70
push eax
push dword [0x100b0ef4]
call fcn.10009c70
mov eax, dword [0x100b0fa4]
add eax, 0x1ee70
jmp 0x100073d1
mov eax, dword [0x100b0fa4]
add eax, 0x1b3060
push eax
push dword [0x100b0ef4]
call fcn.10009c70
mov eax, dword [0x100b0fa4]
add eax, 0x1b3060
push eax
push dword [0x100b0f18]
call fcn.10009c70
add esp, 0x10
push 0x34
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x100074e9
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x100074e9
cmp byte [0x100afa60], 0
je 0x100074e9
mov byte [0x100afa60], 0
cmp dword [edi + 0x4b0], 0x10010
jne 0x10007463
mov esi, dword [edi + 0x75c]
xorps xmm0, xmm0
push 0
sub esp, 0x18
mov ecx, esp
push 6
movups xmmword [ecx], xmm0
push str.Raiden
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100018d0
push 0x10092c80
push 0x10091e70
push esi
call fcn.1000a070
add esp, 0x28
cmp dword [edi + 0x4b0], 0x11400
jne 0x100074af
mov esi, dword [edi + 0x75c]
xorps xmm0, xmm0
push 0
sub esp, 0x18
mov ecx, esp
push 3
movups xmmword [ecx], xmm0
push 0x100718e8
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100018d0
push 0x10091060
push 0x10090250
push esi
call fcn.1000a070
add esp, 0x28
push 0
push 0
push 0
push 0x100000
mov ecx, edi
mov dword [edi + 0x618], 0x100000
call fcn.1000e170
mov dword [edi + 0x2620], 0
mov dword [edi + 0x263c], 0
mov dword [edi + 0x2628], 0
push 0x35
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x100075f2
cmp byte [0x100afa60], 0
jne 0x100075f2
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x100075f2
mov byte [0x100afa60], 1
cmp dword [edi + 0x4b0], 0x10010
jne 0x1000756c
mov esi, dword [edi + 0x75c]
xorps xmm0, xmm0
push 1
sub esp, 0x18
mov ecx, esp
push 6
movups xmmword [ecx], xmm0
push str.Raiden
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100018d0
push 0x10092c80
push 0x10091e70
push esi
call fcn.1000a070
add esp, 0x28
cmp dword [edi + 0x4b0], 0x11400
jne 0x100075b8
mov esi, dword [edi + 0x75c]
xorps xmm0, xmm0
push 1
sub esp, 0x18
mov ecx, esp
push 3
movups xmmword [ecx], xmm0
push 0x100718e8
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.100018d0
push 0x10091060
push 0x10090250
push esi
call fcn.1000a070
add esp, 0x28
push 0
push 0
push 0
push 0x100000
mov ecx, edi
mov dword [edi + 0x618], 0x100000
call fcn.1000e170
mov dword [edi + 0x2620], 0
mov dword [edi + 0x263c], 0
mov dword [edi + 0x2628], 0
cmp dword [edi + 0x618], 0x100011
jne 0x10007619
cmp byte [0x100afa60], 0
je 0x10007619
push 0
push 0
push 0
push 0x200011
mov ecx, edi
call fcn.1000e170
mov ecx, dword [edi + 0x618]
cmp ecx, 0x200011
jne 0x10007644
mov eax, dword [0x100b0fa4]
mov ecx, edi
add eax, 0x47a600
call eax
push edi
call fcn.10009270
mov ecx, dword [edi + 0x618]
add esp, 4
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x10007918
cmp ecx, 0x100012
je 0x100076be
cmp ecx, 0x10001b
je 0x100076be
cmp ecx, 0x100011
je 0x100076be
cmp byte [0x100afa62], 0
je 0x100076be
cmp byte [0x100afa60], 0
jne 0x100076be
push str.ghid_
push 0x100900b0
mov byte [0x100afa62], 0
push str.2110
push dword [edi + 0x75c]
call fcn.10005450
push 0x10090014
push str.0048
push str.24C0
push dword [edi + 0x75c]
call fcn.10005450
add esp, 0x20
mov ecx, edi
call fcn.1000e270
test al, al
jne 0x10007918
mov eax, dword [edi + 0x618]
cmp eax, 0x100012
je 0x10007918
cmp eax, 0x100013
je 0x10007918
cmp byte [0x100afa60], 0
jne 0x10007918
cmp eax, 0x100002
je 0x1000771d
cmp eax, 0x100000
je 0x1000771d
cmp eax, 0x100001
je 0x1000771d
cmp eax, 0x10000f
je 0x1000771d
cmp eax, 0x100011
jne 0x10007918
cmp dword [edi + 0x25e8], 0
je 0x100077a5
mov eax, dword [edi + 0xe24]
test dword [edi + 0xcfc], eax
je 0x100077a5
push str.ghid_
push 0x100900b0
mov byte [0x100afa62], 1
push str.2110
push dword [edi + 0x75c]
call fcn.10005450
add esp, 0x10
mov ecx, edi
push 0
push 0
push 0
push 0x100012
call fcn.1000e170
cmp dword [edi + 0x2620], 5
mov dword [edi + 0x25f8], 0
mov dword [edi + 0x25f4], 0
mov dword [edi + 0x2568], 0
mov dword [edi + 0x25e8], 0
jl 0x100077a5
mov dword [edi + 0x2620], 0
cmp dword [edi + 0x25f8], 0
je 0x1000783a
mov eax, dword [edi + 0xe20]
test dword [edi + 0xcfc], eax
jne 0x100077c9
cmp dword [edi + 0x2568], 0
je 0x1000783a
push str.ghid_
push str.3016
mov byte [0x100afa62], 1
push str.2110
push dword [edi + 0x75c]
call fcn.10005450
add esp, 0x10
mov ecx, edi
push 0
push 0
push 0
push 0x100012
call fcn.1000e170
cmp dword [edi + 0x2620], 5
mov dword [edi + 0x25f8], 0
mov dword [edi + 0x25f4], 0
mov dword [edi + 0x2568], 0
mov dword [edi + 0x25e8], 0
jl 0x1000783a
mov dword [edi + 0x2620], 0
mov eax, dword [edi + 0xcfc]
test dword [edi + 0xe20], eax
je 0x10007890
test dword [edi + 0xe24], eax
je 0x10007890
push 0x10090014
push str.0048
mov byte [0x100afa62], 1
push str.24C0
push dword [edi + 0x75c]
call fcn.10005450
add esp, 0x10
mov ecx, edi
push 0
push 0
push 0
push 0x10001b
call fcn.1000e170
mov dword [edi + 0x2644], 0
cmp dword [edi + 0x25e8], 0
je 0x10007918
mov eax, dword [edi + 0xcfc]
test dword [edi + 0xe20], eax
je 0x10007918
push str.ghid_
push str.3010
mov byte [0x100afa62], 1
push str.2110
push dword [edi + 0x75c]
call fcn.10005450
add esp, 0x10
mov ecx, edi
push 0
push 0
push 0
push 0x100012
call fcn.1000e170
cmp dword [edi + 0x2620], 5
mov dword [edi + 0x25f8], 0
mov dword [edi + 0x25f4], 0
mov dword [edi + 0x2568], 0
mov dword [edi + 0x25e8], 0
jl 0x10007918
mov dword [edi + 0x2620], 0
mov eax, dword [0x100b0fa4]
push 0
push ecx
add eax, 0x14a5024
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001680
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10007971
push 0
push ecx
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001680
add esp, 8
mov dword [ebp - 0x18], eax
test eax, eax
je 0x10007971
push 0
push ecx
add eax, 0x618
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001680
add esp, 8
mov dword [ebp - 0x18], eax
cmp byte [0x100b0fac], 0
je 0x10007996
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x10007996
push dword [edi + 0x75c]
call fcn.100089c0
add esp, 4
mov eax, dword [edi + 0x75c]
mov dword [ebp - 0x508], eax
mov eax, dword [edi + 0x618]
mov dword [ebp - 0x504], eax
mov eax, dword [0x100b0fa4]
push 0
push ecx
add eax, 0x14a9f04
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001680
add esp, 8
mov dword [ebp - 0x51c], eax
push 0
push ecx
mov ecx, dword [0x100b0fa4]
mov edx, esp
add ecx, 0x18793a0
push ecx
mov ecx, edx
call fcn.10003300
call fcn.10001680
add esp, 8
call fcn.10006640
mov eax, dword [0x100b0ff8]
mov dword [ebp - 4], 0
mov esi, dword [eax + 0x60]
test esi, esi
je 0x10007af5
mov ecx, dword [0x100b1024]
test dword [ecx + 4], 0xa0000
jne 0x10007afb
test dword [ecx], 0x2000000
jne 0x10007afb
mov eax, dword [0x100b1028]
test dword [eax], 0x400000
jne 0x10007afb
mov eax, dword [esi + 0x618]
cmp eax, 0xcd
je 0x10007a52
cmp eax, 0xce
jne 0x10007a64
push 0
push 0
push 1
push 0x100055
mov ecx, esi
call fcn.1000e170
cmp dword [esi + 0x618], 0x45
mov eax, dword [0x100b0fa4]
lea ecx, [eax + 0x7da310]
je 0x10007a7e
lea ecx, [eax + 0x46b890]
push 1
push ecx
push ecx
add eax, 0x129ec28
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001790
mov eax, dword [esi + 0x618]
add esp, 0xc
cmp eax, 0x51
je 0x10007ae3
cmp eax, 0x4f
je 0x10007ae3
cmp eax, 0x6f
je 0x10007ae3
cmp eax, 0x66
je 0x10007ae3
cmp eax, 0x61
je 0x10007ae3
cmp eax, 3
je 0x10007ae3
cmp eax, 4
je 0x10007ae3
cmp eax, 0x69
je 0x10007ae3
cmp eax, 0x6e
je 0x10007ae3
cmp eax, 0x74
je 0x10007ae3
cmp eax, 0x75
je 0x10007ae3
cmp eax, 0x5b
je 0x10007ae3
cmp eax, 0xc
je 0x10007ae3
cmp eax, 0x5d
jne 0x10007af5
push 0
push 0
push 1
push 0x100000
mov ecx, esi
call fcn.1000e170
mov ecx, dword [0x100b1024]
test dword [ecx + 4], 0x20000
mov dword [ebp - 4], 0xffffffff
jne 0x10007b1d
mov ecx, edi
call fcn.1000e280
test al, al
jne 0x10007b1d
mov ecx, edi
call fcn.1000e290
cmp dword [edi + 0x618], 0x777
jne 0x10007b6a
mov eax, dword [0x100b1028]
test dword [eax], 0x1000
jne 0x10007b6a
push 0x5a
push 2
push 0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x514], 0x578
push eax
lea eax, [ebp - 0x514]
mov dword [ebp - 0x510], 0x579
push eax
push dword [0x100afa74]
push edi
call fcn.10008f40
add esp, 0x1c
cmp dword [edi + 0x618], 0x888
jne 0x10007bb0
mov eax, dword [0x100b1028]
test dword [eax], 0x1000
jne 0x10007bb0
push 0x5a
push 1
push 0
lea eax, [ebp - 0x520]
mov dword [ebp - 0x510], 0x640
push eax
lea eax, [ebp - 0x510]
push eax
push dword [0x100afa74]
push edi
call fcn.10008f40
add esp, 0x1c
mov eax, dword [0x100b100c]
mov esi, dword [eax + 0x4c]
mov dword [ebp - 0x510], esi
cmp esi, dword [eax + 0x50]
je 0x10007ed9
call fcn.10006a10
mov eax, dword [esi]
mov dword [ebp - 0x520], eax
test eax, eax
je 0x10007eb6
mov ecx, eax
call fcn.1000e1f0
mov esi, eax
test esi, esi
je 0x10007eb6
mov ecx, dword [ebp - 0x520]
mov ecx, dword [ecx + 0x24]
cmp ecx, 0x20144
je 0x10007c72
cmp ecx, 0x20142
je 0x10007c72
cmp ecx, 0x20140
je 0x10007c72
cmp ecx, 0x20150
je 0x10007c72
cmp ecx, 0x20152
je 0x10007c72
cmp ecx, 0x20160
je 0x10007c72
cmp ecx, 0x20170
je 0x10007c72
cmp ecx, 0x20180
je 0x10007c72
cmp ecx, 0x20182
je 0x10007c72
cmp ecx, 0x20220
je 0x10007c72
cmp ecx, 0x20310
je 0x10007c72
cmp ecx, 0x2070a
je 0x10007c72
cmp ecx, 0x20700
je 0x10007c72
cmp ecx, 0x20020
je 0x10007c72
cmp ecx, 0x20110
jne 0x10007eb6
movss xmm0, dword [edi + 0x44]
subss xmm0, dword [esi + 0x44]
movsd xmm1, qword [0x10071a50]
cvtps2pd xmm0, xmm0
call fcn.1004c430
movsd xmm1, qword [0x10071a50]
cvtsd2ss xmm0, xmm0
movss dword [ebp - 0x50c], xmm0
movss xmm0, dword [edi + 0x40]
subss xmm0, dword [esi + 0x40]
cvtps2pd xmm0, xmm0
call fcn.1004c430
movss xmm1, dword [ebp - 0x50c]
cvtsd2ss xmm0, xmm0
addss xmm1, xmm0
movss xmm0, dword [edi + 0x48]
subss xmm0, dword [esi + 0x48]
movss dword [ebp - 0x50c], xmm1
movsd xmm1, qword [0x10071a50]
cvtps2pd xmm0, xmm0
call fcn.1004c430
movss xmm1, dword [ebp - 0x50c]
cvtsd2ss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x10007d06
sqrtsd xmm0, xmm0
jmp 0x10007d0b
call fcn.1004cf80
mov eax, dword [edi + 0x618]
cvtsd2ss xmm0, xmm0
cmp eax, 0x100015
je 0x10007d27
cmp eax, 0x100014
jne 0x10007df3
mov eax, dword [esi + 0x618]
cmp eax, 0x777
je 0x10007df3
cmp eax, 0x888
je 0x10007df3
movss xmm1, dword [0x10071a58]
comiss xmm1, xmm0
jb 0x10007df3
cmp dword [esi + 0x870], 0
jle 0x10007df3
cmp dword [esi + 0x4b0], 0x20020
je 0x10007d77
mov dword [esi + 0x4b0], 0x20020
mov dword [0x100afa74], esi
cmp dword [edi + 0x618], 0x100015
jne 0x10007db8
mov eax, dword [0x100b1028]
mov ecx, edi
push 0
push 0
push 0
or dword [eax], 0x2000000
push 0x777
call fcn.1000e170
push 0
push 0
push 0
push 0x777
mov ecx, esi
call fcn.1000e170
cmp dword [edi + 0x618], 0x100014
jne 0x10007df3
mov eax, dword [0x100b1028]
mov ecx, edi
push 0
push 0
push 0
or dword [eax], 0x2000000
push 0x888
call fcn.1000e170
push 0
push 0
push 0
push 0x888
mov ecx, esi
call fcn.1000e170
cmp dword [esi + 0x618], 0x777
jne 0x10007e55
mov eax, dword [0x100b1028]
test dword [eax], 0x1000
jne 0x10007e55
cmp dword [ebp - 0x518], 0x610
mov dword [ebp - 0x20], 0x5dc
mov dword [ebp - 0x1c], 0x5dd
jne 0x10007e38
push 0
push 0
push 0
push 0x40001
mov ecx, esi
call fcn.1000e170
push 0
push 2
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x520]
push dword [0x100afa74]
push edi
call fcn.10008650
add esp, 0x18
cmp dword [esi + 0x618], 0x888
jne 0x10007eb6
mov eax, dword [0x100b1028]
test dword [eax], 0x1000
jne 0x10007eb6
cmp dword [ebp - 0x518], 0x610
mov dword [ebp - 0x50c], 0x6a4
jne 0x10007e96
push 0
push 0
push 0
push 0x40001
mov ecx, esi
call fcn.1000e170
push 0
push 1
lea eax, [ebp - 0x50c]
push eax
push dword [ebp - 0x520]
push dword [0x100afa74]
push edi
call fcn.10008650
add esp, 0x18
mov eax, dword [ebp - 0x510]
mov eax, dword [eax + 8]
mov dword [ebp - 0x510], eax
mov eax, dword [0x100b100c]
mov esi, dword [ebp - 0x510]
cmp esi, dword [eax + 0x50]
jne 0x10007bc7
mov esi, dword [ebp - 0x518]
cmp esi, 0x740
je 0x10007f14
cmp esi, 0x470
je 0x10007f14
cmp esi, 0xa15
je 0x10007f14
cmp esi, 0x138
je 0x10007f14
cmp esi, 0xa50
je 0x10007f14
mov eax, dword [0x100b0fa4]
lea ecx, [eax + 0x6c3920]
jmp 0x10007f1f
mov eax, dword [0x100b0fa4]
lea ecx, [eax + 0x6c0b00]
push ecx
add eax, 0x129ede0
push eax
call fcn.10009c70
mov ecx, dword [0x100b0fa4]
lea eax, [ecx + 0x78c900]
push eax
lea eax, [ecx + 0x129ebd0]
push eax
call fcn.10009c70
add esp, 0x10
cmp byte [0x10090249], 0
je 0x10007fb9
mov eax, dword [ebp - 0x504]
cmp eax, 0x100000
jne 0x10007f90
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.btl_sam
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
jne 0x10007fa6
mov eax, dword [ebp - 0x504]
cmp esi, 0x470
jne 0x10007f9f
cmp eax, 0x10001c
jne 0x10007fa6
cmp eax, 0x100000
jae 0x10007fb9
cmp dword [edi + 0xb9c], 0
jle 0x10007fb9
mov dword [edi + 0xb9c], 0
mov ecx, dword [0x100b1024]
mov eax, dword [ecx + 4]
test eax, 0x800
je 0x10007fd1
and eax, 0xfffff7ff
mov dword [ecx + 4], eax
cmp dword [ebp - 0x504], 0xe8
jne 0x10008107
cmp dword [edi + 0x61c], 2
jne 0x10008107
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.P138_BREAKDOWN_1
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
jne 0x10008107
push 0
push 0
push 0xa
push 0xe8
mov ecx, edi
call fcn.1000e170
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.a10c
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.100018d0
lea eax, [ebp - 0x30]
push eax
call fcn.1000bf10
push eax
mov eax, dword [ebp - 0x508]
add eax, 0x30a0
push eax
call fcn.10009c70
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.10003720
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x528], 0
push str.a10f
lea ecx, [ebp - 0x538]
mov dword [ebp - 0x524], 0
movups xmmword [ebp - 0x538], xmm0
call fcn.100018d0
mov esi, dword [ebp - 0x528]
xor ecx, ecx
xor edx, edx
test esi, esi
je 0x100080e2
nop dword [eax]
cmp dword [ebp - 0x524], 0xf
lea eax, [ebp - 0x538]
cmova eax, dword [ebp - 0x538]
shl ecx, 8
movsx eax, byte [eax + edx]
inc edx
or ecx, eax
cmp edx, esi
jb 0x100080c0
mov esi, dword [ebp - 0x508]
bswap ecx
push ecx
lea eax, [esi + 0x30dc]
push eax
call fcn.10009c70
add esp, 8
lea ecx, [ebp - 0x538]
call fcn.10003720
jmp 0x1000810d
mov esi, dword [ebp - 0x508]
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.P138_BREAKDOWN_1
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
je 0x1000818d
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x1000818d
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.4201
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x30], xmm0
call fcn.100018d0
lea eax, [ebp - 0x30]
push eax
call fcn.1000bf10
push eax
lea eax, [esi + 0x30a0]
push eax
call fcn.10009c70
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.10003720
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.P138_BREAKDOWN_1
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
je 0x100082b4
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.P138_HELI01_START
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
je 0x100082b4
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.P138_HELI01
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
je 0x100082b4
mov eax, dword [0x100b1024]
test dword [eax + 4], 0x20000
jne 0x100082b4
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x540], 0
push str.4220
lea ecx, [ebp - 0x550]
mov dword [ebp - 0x53c], 0
movups xmmword [ebp - 0x550], xmm0
call fcn.100018d0
mov esi, dword [ebp - 0x540]
xor ecx, ecx
xor edx, edx
test esi, esi
je 0x10008292
cmp dword [ebp - 0x53c], 0xf
lea eax, [ebp - 0x550]
cmova eax, dword [ebp - 0x550]
shl ecx, 8
movsx eax, byte [eax + edx]
inc edx
or ecx, eax
cmp edx, esi
jb 0x10008270
mov eax, dword [ebp - 0x508]
bswap ecx
push ecx
add eax, 0x30dc
push eax
call fcn.10009c70
add esp, 8
lea ecx, [ebp - 0x550]
call fcn.10003720
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.P138_HELI01
call eax
mov esi, dword [ebp - 0x504]
add esp, 4
cmp dword [ebp - 0x260], eax
jne 0x10008301
cmp esi, 0xe8
jne 0x10008301
push 0
push 0
push 1
push 0x100000
mov ecx, edi
call fcn.1000e170
cmp dword [ebp - 0x51c], 0
je 0x1000831c
cmp dword [edi + 0x3458], 0
je 0x1000831c
cmp dword [ebp - 0x18], 0x60003
jne 0x10008348
mov ecx, dword [0x100b1024]
test dword [ecx + 4], 0x80000
jne 0x10008340
test dword [ecx], 0x2000000
jne 0x10008340
mov eax, dword [0x100b1028]
test dword [eax], 0x400000
je 0x1000835d
cmp esi, 0x100000
jb 0x100083a9
push 0
push 0
push 1
push 0
mov ecx, edi
call fcn.1000e170
mov ecx, dword [0x100b1024]
cmp esi, 0x100000
jb 0x100083a9
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.btl_sam_3
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
jne 0x1000858d
cmp dword [ebp - 0x51c], 0
je 0x10008524
mov ecx, dword [0x100b1024]
test dword [ecx + 4], 0x80000
jne 0x100083f9
test dword [ecx], 0x2000000
jne 0x100083f9
mov eax, dword [0x100b1028]
test dword [eax], 0x400000
jne 0x100083f9
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.btl_sam_3
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
mov eax, dword [0x100b0efc]
jne 0x100083fe
mov eax, dword [0x100b0ef0]
push eax
push dword [0x100b0f88]
call fcn.10009c70
mov ecx, dword [0x100b1024]
add esp, 8
test dword [ecx + 4], 0x80000
jne 0x100084df
test dword [ecx], 0x2000000
jne 0x100084df
mov eax, dword [0x100b1028]
test dword [eax], 0x400000
jne 0x100084df
push dword [0x100b0f88]
lea ecx, [ebp - 0x18]
call fcn.10003300
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x28], esi
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
setne byte [ebp - 0x1c]
mov esi, dword [esi]
test eax, eax
je 0x1000848a
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x18]
push ecx
push eax
push dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp esi, dword [0x100b0ef0]
je 0x100084d3
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.btl_sam_3
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
je 0x100084d3
push dword [0x100b0ef0]
push dword [0x100b0f48]
call fcn.10009c70
add esp, 8
mov esi, dword [ebp - 0x504]
mov ecx, dword [0x100b1024]
test dword [ecx + 4], 0x20000
jne 0x100084f1
cmp dword [ebp - 0x51c], 0
jne 0x100084fc
mov ecx, edi
call fcn.1000e280
test al, al
je 0x10008510
push dword [0x100b0f44]
push dword [0x100b0f78]
call fcn.10009c70
add esp, 8
push dword [0x100b0f10]
push dword [0x100b0f7c]
call fcn.10009c70
add esp, 8
push dword [0x100b1010]
lea ecx, [ebp - 0x298]
call fcn.100027f0
mov eax, dword [0x100b0fa4]
add eax, 0xa03ea0
push str.btl_sam_3
call eax
add esp, 4
cmp dword [ebp - 0x260], eax
jne 0x10008614
cmp esi, 0x100051
je 0x100085ed
cmp esi, 0x10004e
je 0x100085ed
cmp esi, 0x100000
jb 0x10008614
push 0
push 0
push 0
push 0
mov ecx, edi
call fcn.1000e170
jmp 0x10008614
push dword [0x100b0efc]
push dword [0x100b0f88]
call fcn.10009c70
push dword [0x100b0f74]
push dword [0x100b0f48]
call fcn.10009c70
push dword [0x100b0ef8]
push dword [0x100b0f7c]
call fcn.10009c70
add esp, 0x18
mov ecx, edi
call fcn.1000e280
test al, al
jne 0x100085dc
cmp dword [ebp - 0x51c], 0
mov eax, dword [0x100b0f8c]
je 0x100085e1
mov eax, dword [0x100b0f44]
push eax
push dword [0x100b0f78]
jmp 0x1000851c
push 0
push 0
push 0
push 0xc9
mov ecx, edi
call fcn.1000e170
jmp 0x10008614
push 8
push ecx
mov ecx, esp
push eax
call fcn.10003300
call fcn.10001700
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100459fc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp byte [0x100b0fc4], 0
jne 0x100089b5
call fcn.10008c80
mov byte [0x100b0fc4], 1
jmp 0x10007150