Function at 0x10035c50
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009547c
mov eax, dword fs:[0]
push eax
sub esp, 0x308
mov eax, dword [0x100bc010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, str.boats
mov dword [ebp - 0x2b8], 0
mov ecx, 0x100bd078
call fcn.1006cdc0
test al, al
je 0x100373d3
call fcn.10075020
push eax
call fcn.1000d760
test eax, eax
jne 0x100373d3
mov edx, str.none
mov ecx, 0x100bd078
call fcn.1006cdc0
test al, al
je 0x10035cd6
movzx eax, byte [0x102406af]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 5
push str.boats
mov ecx, 0x100bd078
call fcn.1006c240
cmp dword [0x100bdd04], 0x10
lea ecx, [ebp - 0x2b8]
mov eax, 0x100bdcf0
mov dword [0x100bcd00], 7
cmovae eax, dword [0x100bdcf0]
push 0x582432
mov dword [0x100d02c8], eax
call fcn.1000fbc0
mov esi, dword [ebp - 0x2b8]
lea eax, [ebp - 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 6
cmp byte [ebp - 0x14], 0
je 0x10035d65
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x2b8]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x2b8], eax
push dword [ebp - 0x20]
call edi
push ecx
mov dl, 6
mov ecx, 0x58242b
call fcn.100749d0
add esp, 4
mov eax, 0x582300
push 1
push 1
push 1
push 3
sub esp, 0xc
mov dword [esp + 8], 0x435c0000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x100d02c8]
push 0
call eax
add esp, 0x24
mov byte [0x102406af], al
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 1
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model1
cmp eax, 0xc
jb 0x10035e39
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x10035e50
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0xc
call fcn.1006df70
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10035eb8
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035eae
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100373ee
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2bc], 0x1ed
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 6
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model2
cmp eax, 0xc
jb 0x10035f4a
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x10035f61
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0xc
call fcn.1006df70
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xd0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10035fd5
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10035fcb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100373f3
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2c0], 0x1ed
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x1a
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model3
cmp eax, 0xc
jb 0x10036067
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1003607e
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0xc
call fcn.1006df70
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100360e6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100360dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100373f8
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2c4], 0x1ed
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x6a
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model4
cmp eax, 0xc
jb 0x10036178
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1003618f
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0xc
call fcn.1006df70
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10036203
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100361f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100373fd
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2c8], 0x1ed
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x1aa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model5
cmp eax, 0xc
jb 0x10036295
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x100362ac
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0xc
call fcn.1006df70
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10036320
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036316
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037402
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2cc], 0x1ed
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x6aa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._boat_model6
cmp eax, 0xc
jb 0x100363b2
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x100363c9
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0xc
call fcn.1006df70
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1003643d
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036433
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037407
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2d0], 0x1ed
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x1aaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x10
push str._boat_occupants1
cmp eax, 0x10
jb 0x100364cf
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x10]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0x10], 0
lea eax, [ebp - 0x28]
jmp 0x100364e6
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0x10
call fcn.1006df70
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x100], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xf0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1003655a
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036550
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003740c
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2d4], 3
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x6aaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x10
push str._boat_occupants2
cmp eax, 0x10
jb 0x100365ec
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x10]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0x10], 0
lea eax, [ebp - 0x28]
jmp 0x10036603
mov byte [ebp - 0x2b4], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x2b4]
push 0x10
call fcn.1006df70
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1003666e
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10036664
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10037411
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x2d8], 3
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2b8], 0x1aaaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push str._boat_occupants3
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x130]
call fcn.1006d3f0
add esp, 4
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x2dc], 3
lea ecx, [ebp - 0x190]
call fcn.1006ccd0
push str._boat_occupants4
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x148]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x1d
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x2ec], 3
lea ecx, [ebp - 0x1a8]
call fcn.1006ccd0
push str._boat_occupants5
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x160]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x20
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x2e8], 3
lea ecx, [ebp - 0x190]
call fcn.1006ccd0
push str._boat_occupants6
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x178]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x23
call fcn.1006c080
mov dword [ebp - 0x2e4], 3
push 0x100bce7c
mov edx, 0x100bd1ec
lea ecx, [ebp - 0x1a8]
call fcn.1006ccd0
push str._max_boats
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x118]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x26
call fcn.1006c080
mov dword [ebp - 0x2e0], 1
call fcn.10075020
cmp dword [ebp - 0x44], 0x10
lea edx, [ebp - 0x58]
lea esi, [ebp - 0x2bc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x58]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xbc], 0x10
lea edx, [ebp - 0xd0]
lea esi, [ebp - 0x2c0]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xd0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x5c], 0x10
lea edx, [ebp - 0x70]
lea esi, [ebp - 0x2c4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x70]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x8c], 0x10
lea edx, [ebp - 0xa0]
lea esi, [ebp - 0x2c8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xa0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xa4], 0x10
lea edx, [ebp - 0xb8]
lea esi, [ebp - 0x2cc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xb8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xd4], 0x10
lea edx, [ebp - 0xe8]
lea esi, [ebp - 0x2d0]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xe8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xec], 0x10
lea edx, [ebp - 0x100]
lea esi, [ebp - 0x2d4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x100]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x74], 0x10
lea edx, [ebp - 0x88]
lea esi, [ebp - 0x2d8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x88]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
add esp, 0x40
call fcn.10075020
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
lea esi, [ebp - 0x2dc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x130]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x134], 0x10
lea edx, [ebp - 0x148]
lea esi, [ebp - 0x2ec]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x148]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x14c], 0x10
lea edx, [ebp - 0x160]
lea esi, [ebp - 0x2e8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x160]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x164], 0x10
lea edx, [ebp - 0x178]
lea esi, [ebp - 0x2e4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x178]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x104], 0x10
lea edx, [ebp - 0x118]
lea esi, [ebp - 0x2e0]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x118]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
mov edx, dword [ebp - 0x2bc]
add esp, 0x28
sub edx, 0x190
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x2bc], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1a8]
mov edx, dword [ebp - 0x2c0]
sub edx, 0x190
mov dword [ebp - 0x2c0], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x280]
mov edx, dword [ebp - 0x2c4]
sub edx, 0x190
mov dword [ebp - 0x2c4], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x268]
mov edx, dword [ebp - 0x2c8]
sub edx, 0x190
mov dword [ebp - 0x2c8], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x298]
mov edx, dword [ebp - 0x2cc]
sub edx, 0x190
mov dword [ebp - 0x2cc], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x250]
mov edx, dword [ebp - 0x2d0]
sub edx, 0x190
mov dword [ebp - 0x2d0], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x238]
mov edx, dword [ebp - 0x2d4]
call fcn.1000fa20
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x220]
mov edx, dword [ebp - 0x2d8]
call fcn.1000fa20
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x208]
mov edx, dword [ebp - 0x2dc]
call fcn.1000fa20
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1f0]
mov edx, dword [ebp - 0x2ec]
call fcn.1000fa20
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1d8]
mov edx, dword [ebp - 0x2e8]
call fcn.1000fa20
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1c0]
mov edx, dword [ebp - 0x2e4]
call fcn.1000fa20
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x2e0]
call fcn.1000fa20
mov byte [ebp - 4], 0x33
call fcn.1004ba70
call fcn.10052900
call fcn.10059c10
call fcn.1005fd40
cmp byte [0x10110338], 0
je 0x10036c66
call fcn.1004ee10
call fcn.10055fc0
call fcn.1005c6b0
lea eax, [ebp - 0x190]
mov edx, 0x100a4624
push eax
lea ecx, [ebp - 0x40]
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x58]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x1a8]
lea edi, [ebp - 0x58]
mov edx, 0x100a4624
cmovae edi, dword [ebp - 0x58]
lea ecx, [ebp - 0x40]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xd0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x310], eax
lea eax, [ebp - 0x280]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x70]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x268]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xa0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x298]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x250]
push eax
call fcn.1006d1c0
add esp, 4
push eax
lea ecx, [ebp - 0xe8]
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
mov edx, str.wleOCP
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0x238]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x100]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xec], 0x10
lea eax, [ebp - 0x100]
mov edx, str.wleOCP
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x100]
mov dword [ebp - 0x2f4], eax
lea eax, [ebp - 0x220]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x88]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov edx, str.wleOCP
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x2f8], eax
lea eax, [ebp - 0x208]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov edx, str.wleOCP
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x130]
mov dword [ebp - 0x2fc], eax
lea eax, [ebp - 0x1f0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x148]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x134], 0x10
lea eax, [ebp - 0x148]
mov edx, str.wleOCP
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x148]
mov dword [ebp - 0x300], eax
lea eax, [ebp - 0x1d8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x160]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x14c], 0x10
lea eax, [ebp - 0x160]
cmovae eax, dword [ebp - 0x160]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x308], eax
mov edx, str.wleOCP
lea eax, [ebp - 0x1c0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x178]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x164], 0x10
lea eax, [ebp - 0x178]
cmovae eax, dword [ebp - 0x178]
mov dword [ebp - 0x304], eax
call fcn.10063c60
lea eax, [ebp - 0x28]
mov edx, str.wleN
push eax
lea ecx, [ebp - 0x40]
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x118]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x104], 0x10
lea eax, [ebp - 0x118]
mov ecx, 0xc9bee4
cmovae eax, dword [ebp - 0x118]
mov dword [ebp - 0x30c], eax
call fcn.10074bd0
mov ecx, 0xc9bee8
mov word [0x10200414], ax
call fcn.10074bd0
mov ax, word [0x10200414]
mov ecx, 0xc9bee4
shr ax, 1
mov word [0x1023066c], ax
call fcn.10074bd0
mov ecx, 0xc9bee8
mov word [0x10200414], ax
call fcn.10074bd0
mov si, word [0x10200414]
mov eax, 0x66666667
movzx ecx, si
shr ecx, 1
imul ecx
shr si, 2
sar edx, 1
mov eax, edx
mov word [0x10150340], si
shr eax, 0x1f
add eax, edx
mov word [0x1023066c], ax
movzx eax, si
mov esi, 0x582050
push eax
movzx eax, byte [0x102406af]
push 0
push eax
call esi
movzx eax, word [0x10150340]
push eax
movzx eax, byte [0x102406af]
push 1
push eax
call esi
movzx eax, word [0x10150340]
push eax
movzx eax, byte [0x102406af]
push 2
push eax
call esi
push 0x100bce7c
mov edx, 0x100bd1ec
lea ecx, [ebp - 0x2b0]
call fcn.1006ccd0
push str._enable_slot
mov edx, eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x40]
call fcn.1006d3f0
add esp, 0x2c
mov ecx, 0x100bd36c
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x33
call fcn.1006c080
call fcn.10075020
cmp dword [0x100bd380], 0x10
mov edx, 0x100bd36c
mov ecx, 0x100bd584
cmovae edx, dword [0x100bd36c]
cmp dword [0x100bd598], 0x10
push 0x1015034b
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b610
add esp, 8
mov edx, 1
cmp dword [0x101903c0], 6
jl 0x1003710c
push edx
jmp 0x10037114
movzx eax, byte [0x1015034b]
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
add esp, 4
mov edx, 2
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 3
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 4
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 5
push eax
call fcn.1006cf00
mov edx, str.Boats
mov ecx, str.wleBOTS
call fcn.1006d090
mov edx, str.Seilors
mov ecx, str.wleSEIL
call fcn.1006d090
mov edx, str.Not_Done_Jet
mov ecx, str.wleELIN
call fcn.1006d090
mov edx, str.Max_Number_of_Boats:
mov ecx, str.wleMAXB
call fcn.1006d090
mov edx, str.Occupants
mov ecx, str.wle_OCC
call fcn.1006d090
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x102406af]
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
push dword [ebp - 0x2f0]
push dword [ebp - 0x314]
push dword [ebp - 0x310]
push edi
push str.wleBOTS
push 0
push eax
call fcn.10011230
add esp, 0x4c
movzx eax, byte [0x102406af]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.wleMAXB
push str.wleELIN
push str.wleELIN
push str.wleELIN
push str.wleELIN
push str.wleELIN
push str.wleELIN
push str.wleSEIL
push 1
push eax
call fcn.10011230
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x30c]
push dword [ebp - 0x304]
push dword [ebp - 0x308]
push dword [ebp - 0x300]
push dword [ebp - 0x2fc]
push dword [ebp - 0x2f8]
push dword [ebp - 0x2f4]
push str.wle_OCC
movzx eax, byte [0x102406af]
push 2
push eax
call fcn.10011230
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0x28]
add esp, 0x78
mov dword [0x102f2b30], eax
mov byte [0x10200476], 0xff
call fcn.1006c080
lea ecx, [ebp - 0x1c0]
call fcn.1006c080
lea ecx, [ebp - 0x1d8]
call fcn.1006c080
lea ecx, [ebp - 0x1f0]
call fcn.1006c080
lea ecx, [ebp - 0x208]
call fcn.1006c080
lea ecx, [ebp - 0x220]
call fcn.1006c080
lea ecx, [ebp - 0x238]
call fcn.1006c080
lea ecx, [ebp - 0x250]
call fcn.1006c080
lea ecx, [ebp - 0x298]
call fcn.1006c080
lea ecx, [ebp - 0x268]
call fcn.1006c080
lea ecx, [ebp - 0x280]
call fcn.1006c080
lea ecx, [ebp - 0x1a8]
call fcn.1006c080
lea ecx, [ebp - 0x190]
call fcn.1006c080
lea ecx, [ebp - 0x118]
call fcn.1006c080
lea ecx, [ebp - 0x178]
call fcn.1006c080
lea ecx, [ebp - 0x160]
call fcn.1006c080
lea ecx, [ebp - 0x148]
call fcn.1006c080
lea ecx, [ebp - 0x130]
call fcn.1006c080
lea ecx, [ebp - 0x88]
call fcn.1006c080
lea ecx, [ebp - 0x100]
call fcn.1006c080
lea ecx, [ebp - 0xe8]
call fcn.1006c080
lea ecx, [ebp - 0xb8]
call fcn.1006c080
lea ecx, [ebp - 0xa0]
call fcn.1006c080
lea ecx, [ebp - 0x70]
call fcn.1006c080
lea ecx, [ebp - 0xd0]
call fcn.1006c080
lea ecx, [ebp - 0x58]
call fcn.1006c080
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007547f
mov esp, ebp
pop ebp
ret
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
int3