Function at 0x10031450
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10059398
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x1006a010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0xec], 0
lea ecx, [ebp - 0x2bc]
call fcn.10009ae0
mov ecx, str.WantedLevelEditor.xml
mov dword [ebp - 4], 0
call fcn.1003bb90
push eax
lea ecx, [ebp - 0x2bc]
call fcn.10009f70
test eax, eax
jne 0x10032295
mov edx, str.Planes_
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x10032295
push 0x10
push str._plane_occupants
mov ecx, 0x1006b388
call fcn.10037420
mov edx, str.none
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x10031507
movzx eax, byte [0x100ec940]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 7
push str.Planes_
mov ecx, 0x1006ad80
call fcn.10037420
mov eax, dword [0x1025c244]
test al, 1
jne 0x1003154c
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
mov esi, 0x582029
mov dword [ebp - 0x1c], 4
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 3
cmp byte [ebp - 0x14], 0
je 0x10031597
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xec]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0xec], eax
push dword [ebp - 0x20]
call edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006b1b8]
inc eax
mov dword [ebp - 0x18], 0
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 1
call fcn.10038e60
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x1006359c
cmp eax, 1
jb 0x100315fd
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x10031614
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 1
call fcn.10038840
push 0x1006b1a8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x10063598
cmp eax, 1
jb 0x1003165b
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
lea eax, [ebp - 0x28]
jmp 0x10031672
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 1
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 3
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af38
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10037170
mov ecx, 0x1006b3b8
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xa0]
push eax
movq qword [ebp - 0x90], xmm0
call fcn.100372d0
mov edx, dword [ebp - 0x8c]
cmp edx, 0x10
jb 0x10031730
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10031726
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322bb
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10031768
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003175e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322c0
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
cmp edx, 0x10
jb 0x100317b2
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100317a8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322c5
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b3cc], 0x10
lea ecx, [ebp - 0xb8]
movzx edx, byte [0x1006c840]
mov eax, 0x1006b3b8
cmovae eax, dword [0x1006b3b8]
mov dword [0x1013c9b0], eax
call fcn.1000c860
push eax
mov ecx, 0x1006af68
call fcn.100372d0
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x10031821
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10031817
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322ca
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0xe
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._plane_model
cmp eax, 0xc
jb 0x100318a9
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x100318c0
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0xc
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0x1e
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.10037170
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10031976
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003196c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322cf
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100319c0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100319b6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322d4
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0xf4], 0x1dc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0x76
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_pilot_
cmp eax, 0xd
jb 0x10031a52
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x10031a69
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0xd
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0xf6
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.10037170
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10031b1c
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10031b12
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322d9
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10031b66
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10031b5c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322de
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0xf8], 0x11f
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0x3b6
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x10
push str._plane_occupants
cmp eax, 0x10
jb 0x10031bf8
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x10]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0x10], 0
lea eax, [ebp - 0x28]
jmp 0x10031c0f
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0x10
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0x7b6
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.10037170
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10031cc2
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10031cb8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322e3
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10031d0c
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10031d02
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100322e8
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031da4
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10031d9d
cmp dword [ebp - 0xec], 0
je 0x10031da6
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10031d78
xor eax, eax
jmp 0x10031d80
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031da6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031da6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031d50
xor edi, edi
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031e18
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10031e11
cmp dword [ebp - 0xec], 0
je 0x10031e1a
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x10031dec
xor eax, eax
jmp 0x10031df4
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031e1a
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031e1a
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031dc4
xor edi, edi
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031ea4
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10031e9d
cmp dword [ebp - 0xec], 0
je 0x10031ea6
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10031e78
xor eax, eax
jmp 0x10031e80
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031ea6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031ea6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031e50
xor edi, edi
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031f14
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10031f0d
cmp dword [ebp - 0xec], 0
je 0x10031f16
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x10031ee8
xor eax, eax
jmp 0x10031ef0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031f16
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031f16
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031ec0
xor edi, edi
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031f9b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10031f94
cmp dword [ebp - 0xec], 0
je 0x10031f9d
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10031f6f
xor eax, eax
jmp 0x10031f77
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031f9d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031f9d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031f47
xor edi, edi
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10032009
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10032002
cmp dword [ebp - 0xec], 0
je 0x1003200b
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x10031fdd
xor eax, eax
jmp 0x10031fe5
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x1003200b
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1003200b
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031fb5
xor edi, edi
lea eax, [ebp - 0xfc]
mov ecx, edi
push eax
call fcn.10009370
mov edx, dword [ebp - 0xf4]
xor eax, eax
mov ecx, dword [ebp - 0xf8]
mov esi, dword [ebp - 0xfc]
nop dword [eax]
test edx, edx
je 0x1003203c
test ecx, ecx
je 0x1003203c
test esi, esi
jne 0x10032047
inc eax
cmp eax, 0xffffffff
jb 0x10032030
jmp 0x1003227a
sub edx, 0x190
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xf4], edx
call fcn.1000c860
push eax
lea ecx, [ebp - 0x88]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
mov edx, dword [ebp - 0xf8]
lea ecx, [ebp - 0xd0]
call fcn.1000c860
push eax
lea ecx, [ebp - 0x70]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0xd0]
call fcn.1000c860
push eax
lea ecx, [ebp - 0x58]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
lea eax, [ebp - 0x88]
mov edx, 0x100637f4
push eax
lea ecx, [ebp - 0xb8]
call fcn.10037c50
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 0x10
lea ecx, [ebp - 0xe8]
mov edx, 0x100637f8
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x70]
push eax
call fcn.10037c50
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x58]
cmp dword [ebp - 0xd4], 0x10
lea edi, [ebp - 0xe8]
push eax
cmovae edi, dword [ebp - 0xe8]
lea ecx, [ebp - 0xa0]
mov edx, 0x10064f08
call fcn.10037c50
add esp, 0xc
push 1
mov byte [ebp - 4], 0x14
lea esi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0x10
mov eax, 0x582300
push 1
cmovae esi, dword [ebp - 0xa0]
push 1
push 2
sub esp, 0xc
mov dword [esp + 8], 0x42480000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x1013c9b0]
push 0
call eax
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, al
push str.DUMMY
mov dword [0x100ec940], eax
push 0x10065208
push str.CHAR
push str.VHCL
push dword [0x1012c980]
push 0
push eax
mov eax, 0x581e00
call eax
add esp, 0x60
movzx eax, byte [0x100ec940]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push esi
push edi
push dword [ebp - 0xf0]
push str.DUMMY
push 1
push eax
mov eax, 0x581e00
call eax
movzx eax, byte [0x100ec940]
mov esi, 0x582050
push 0xfa
push 0
push eax
call esi
movzx eax, byte [0x100ec940]
add esp, 0x48
push 0xfa
push 1
push eax
call esi
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0xa0]
add esp, 0xc
mov dword [0x1025b6c8], eax
call fcn.10037280
lea ecx, [ebp - 0xe8]
call fcn.10037280
lea ecx, [ebp - 0xb8]
call fcn.10037280
lea ecx, [ebp - 0x58]
call fcn.10037280
lea ecx, [ebp - 0x70]
call fcn.10037280
lea ecx, [ebp - 0x88]
call fcn.10037280
lea ecx, [ebp - 0x2bc]
call fcn.10009d40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003bfa7
mov esp, ebp
pop ebp
ret
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
int3