Function at 0x10032150
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10094e9b
mov eax, dword fs:[0]
push eax
sub esp, 0x560
mov eax, dword [0x100bc010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, str.Helicopters
mov dword [ebp - 0x4e0], 0
mov ecx, 0x100bd078
call fcn.1006cdc0
test al, al
je 0x10033e98
call fcn.10075020
push eax
call fcn.1000d760
mov dword [0x100bca84], eax
test eax, eax
jne 0x10033e98
mov edx, str.none
mov ecx, 0x100bd078
call fcn.1006cdc0
test al, al
je 0x100321db
movzx eax, byte [0x102406af]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 0xb
push str.Helicopters
mov ecx, 0x100bd078
call fcn.1006c240
cmp dword [0x100bdd04], 0x10
lea ecx, [ebp - 0x4e0]
mov eax, 0x100bdcf0
mov dword [0x100bcd00], 7
cmovae eax, dword [0x100bdcf0]
push 0x582432
mov dword [0x100d02c8], eax
call fcn.1000fbc0
mov esi, dword [ebp - 0x4e0]
lea eax, [ebp - 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 6
cmp byte [ebp - 0x14], 0
je 0x1003226a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x4e0]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x4e0], eax
push dword [ebp - 0x20]
call edi
push ecx
mov dl, 6
mov ecx, 0x58242b
call fcn.100749d0
add esp, 4
mov eax, 0x582300
push 0
push 1
push 1
push 3
sub esp, 0xc
mov dword [esp + 8], 0x435c0000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x100d02c8]
push 0
call eax
add esp, 0x24
mov byte [0x102406af], al
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 1
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._helicopter1
cmp eax, 0xc
jb 0x1003233e
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x10032355
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0xc
call fcn.1006df70
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x118], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x108], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100323c9
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100323bf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033eb3
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4e4], 0x1e7
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 6
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._helicopter2
cmp eax, 0xc
jb 0x1003245b
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x10032472
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0xc
call fcn.1006df70
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x100], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xf0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100324e6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100324dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033eb8
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4e8], 0x1e7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 0x1a
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._helicopter3
cmp eax, 0xc
jb 0x10032578
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x1003258f
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0xc
call fcn.1006df70
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xd0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10032603
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100325f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ebd
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4ec], 0x1e7
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 0x6a
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._helicopter4
cmp eax, 0xc
jb 0x10032695
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x100326ac
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0xc
call fcn.1006df70
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10032720
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10032716
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ec2
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4f8], 0x1e7
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 0x1aa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._helicopter5
cmp eax, 0xc
jb 0x100327b2
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x100327c9
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0xc
call fcn.1006df70
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1003283d
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10032833
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ec7
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4f0], 0x1e7
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 0x6aa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xc
push str._helicopter6
cmp eax, 0xc
jb 0x100328cf
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xc]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xc], 0
lea eax, [ebp - 0x28]
jmp 0x100328e6
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0xc
call fcn.1006df70
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10032951
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10032947
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ecc
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4f4], 0x1e7
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 0x1aaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x12
push str._helicopter_pilot1
cmp eax, 0x12
jb 0x100329e3
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x12]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0x12], 0
lea eax, [ebp - 0x28]
jmp 0x100329fa
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0x12
call fcn.1006df70
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10032a6e
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10032a64
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ed1
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x500], 0xa5
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4e0], 0x6aaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x12
push str._helicopter_pilot2
cmp eax, 0x12
jb 0x10032b00
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x12]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0x12], 0
lea eax, [ebp - 0x28]
jmp 0x10032b17
mov byte [ebp - 0x4dc], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4dc]
push 0x12
call fcn.1006df70
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10032b8b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10032b81
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10033ed6
push edx
push ecx
call fcn.100754c5
add esp, 8
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4fc], 0xa5
call fcn.1006ccd0
push str._helicopter_pilot3
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x160]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1a
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x52c], 0xa5
lea ecx, [ebp - 0x70]
call fcn.1006ccd0
push str._helicopter_pilot4
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x148]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1d
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x528], 0xa5
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
push str._helicopter_pilot5
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x178]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x20
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x504], 0xa5
lea ecx, [ebp - 0x70]
call fcn.1006ccd0
push str._helicopter_pilot6
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x190]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x23
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x524], 0xa5
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1a8]
push str._helicopter_occupants1
mov edx, eax
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x26
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x520], 1
lea ecx, [ebp - 0x70]
call fcn.1006ccd0
push str._helicopter_occupants2
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1c0]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x29
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x51c], 1
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
push str._helicopter_occupants3
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1d8]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2c
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x518], 1
lea ecx, [ebp - 0x70]
call fcn.1006ccd0
push str._helicopter_occupants4
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1f0]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2f
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x514], 1
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
push str._helicopter_occupants5
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x208]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x32
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x510], 1
lea ecx, [ebp - 0x70]
call fcn.1006ccd0
push str._helicopter_occupants6
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x220]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x35
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x50c], 1
lea ecx, [ebp - 0x250]
call fcn.1006ccd0
push str._max_helicopters
mov edx, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x238]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x38
call fcn.1006c080
mov dword [ebp - 0x508], 1
call fcn.10075020
cmp dword [ebp - 0x104], 0x10
lea edx, [ebp - 0x118]
lea esi, [ebp - 0x4e4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x118]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xec], 0x10
lea edx, [ebp - 0x100]
lea esi, [ebp - 0x4e8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x100]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xbc], 0x10
lea edx, [ebp - 0xd0]
lea esi, [ebp - 0x4ec]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xd0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xa4], 0x10
lea edx, [ebp - 0xb8]
lea esi, [ebp - 0x4f8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xb8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x8c], 0x10
lea edx, [ebp - 0xa0]
mov ecx, 0x100bd584
lea esi, [ebp - 0x4f0]
cmovae edx, dword [ebp - 0xa0]
cmp dword [0x100bd598], 0x10
cmovae ecx, dword [0x100bd584]
push esi
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x74], 0x10
lea edx, [ebp - 0x88]
lea esi, [ebp - 0x4f4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x88]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xd4], 0x10
lea edx, [ebp - 0xe8]
lea esi, [ebp - 0x500]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xe8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
lea esi, [ebp - 0x4fc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x130]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
add esp, 0x40
call fcn.10075020
cmp dword [ebp - 0x14c], 0x10
lea edx, [ebp - 0x160]
lea esi, [ebp - 0x52c]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x160]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x134], 0x10
lea edx, [ebp - 0x148]
lea esi, [ebp - 0x528]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x148]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x164], 0x10
lea edx, [ebp - 0x178]
lea esi, [ebp - 0x504]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x178]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x17c], 0x10
lea edx, [ebp - 0x190]
lea esi, [ebp - 0x524]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x190]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x194], 0x10
lea edx, [ebp - 0x1a8]
lea esi, [ebp - 0x520]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1a8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x1ac], 0x10
lea edx, [ebp - 0x1c0]
lea esi, [ebp - 0x51c]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1c0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x1c4], 0x10
lea edx, [ebp - 0x1d8]
lea esi, [ebp - 0x518]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1d8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x1dc], 0x10
lea edx, [ebp - 0x1f0]
lea esi, [ebp - 0x514]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1f0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
add esp, 0x40
call fcn.10075020
cmp dword [ebp - 0x1f4], 0x10
lea edx, [ebp - 0x208]
lea esi, [ebp - 0x510]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x208]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x20c], 0x10
lea edx, [ebp - 0x220]
lea esi, [ebp - 0x50c]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x220]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x224], 0x10
lea edx, [ebp - 0x238]
lea esi, [ebp - 0x508]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x238]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
mov edx, dword [ebp - 0x4e4]
add esp, 0x18
sub edx, 0x190
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x4e4], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0x4e8]
sub edx, 0x190
mov dword [ebp - 0x4e8], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x250]
mov edx, dword [ebp - 0x4ec]
sub edx, 0x190
mov dword [ebp - 0x4ec], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x280]
mov edx, dword [ebp - 0x4f8]
sub edx, 0x190
mov dword [ebp - 0x4f8], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x298]
mov edx, dword [ebp - 0x4f0]
sub edx, 0x190
mov dword [ebp - 0x4f0], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2b0]
mov edx, dword [ebp - 0x4f4]
sub edx, 0x190
mov dword [ebp - 0x4f4], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2c8]
mov edx, dword [ebp - 0x500]
call fcn.1000fa20
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2e0]
mov edx, dword [ebp - 0x4fc]
call fcn.1000fa20
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x2f8]
mov edx, dword [ebp - 0x52c]
call fcn.1000fa20
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x310]
mov edx, dword [ebp - 0x528]
call fcn.1000fa20
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x328]
mov edx, dword [ebp - 0x504]
call fcn.1000fa20
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x340]
mov edx, dword [ebp - 0x524]
call fcn.1000fa20
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x3a0]
mov edx, dword [ebp - 0x520]
call fcn.1000fa20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3d0]
mov edx, dword [ebp - 0x51c]
call fcn.1000fa20
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0x518]
lea ecx, [ebp - 0x370]
call fcn.1000fa20
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x388]
mov edx, dword [ebp - 0x514]
call fcn.1000fa20
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x3b8]
mov edx, dword [ebp - 0x510]
call fcn.1000fa20
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x358]
mov edx, dword [ebp - 0x50c]
call fcn.1000fa20
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x508]
call fcn.1000fa20
mov byte [ebp - 4], 0x4b
call fcn.1004ba70
call fcn.10052900
call fcn.10059c10
call fcn.1005fd40
cmp byte [0x10110338], 0
je 0x100334b3
call fcn.1004ee10
call fcn.10055fc0
call fcn.1005c6b0
lea eax, [ebp - 0x58]
mov edx, 0x100a4624
push eax
lea ecx, [ebp - 0x40]
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x118]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x104], 0x10
lea eax, [ebp - 0x70]
lea edi, [ebp - 0x118]
mov edx, 0x100a4624
cmovae edi, dword [ebp - 0x118]
lea ecx, [ebp - 0x40]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x100]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xec], 0x10
lea eax, [ebp - 0x100]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x100]
mov dword [ebp - 0x568], eax
lea eax, [ebp - 0x250]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xd0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x53c], eax
lea eax, [ebp - 0x280]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x298]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xa0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov edx, 0x100a4624
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x4e0], eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.1006d1c0
add esp, 4
push eax
lea ecx, [ebp - 0x88]
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov edx, 0x100a4628
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x4dc], eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xe8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
mov edx, 0x100a4628
lea ecx, [ebp - 0x40]
cmovae eax, dword [ebp - 0xe8]
mov dword [ebp - 0x55c], eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x40]
call fcn.1006c080
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov edx, 0x100a4628
lea ecx, [ebp - 0x448]
cmovae eax, dword [ebp - 0x130]
mov dword [ebp - 0x560], eax
lea eax, [ebp - 0x2f8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x160]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x448]
call fcn.1006c080
cmp dword [ebp - 0x14c], 0x10
lea eax, [ebp - 0x160]
mov edx, 0x100a4628
lea ecx, [ebp - 0x460]
cmovae eax, dword [ebp - 0x160]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x310]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x148]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x460]
call fcn.1006c080
cmp dword [ebp - 0x134], 0x10
lea eax, [ebp - 0x148]
mov edx, 0x100a4628
lea ecx, [ebp - 0x478]
cmovae eax, dword [ebp - 0x148]
mov dword [ebp - 0x56c], eax
lea eax, [ebp - 0x328]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x178]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x478]
call fcn.1006c080
cmp dword [ebp - 0x164], 0x10
lea eax, [ebp - 0x178]
cmovae eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x534], eax
mov edx, 0x100a4628
lea eax, [ebp - 0x340]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x190]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x490]
call fcn.1006c080
cmp dword [ebp - 0x17c], 0x10
lea eax, [ebp - 0x190]
mov edx, str.wleOCP
lea ecx, [ebp - 0x4a8]
cmovae eax, dword [ebp - 0x190]
mov dword [ebp - 0x538], eax
lea eax, [ebp - 0x3a0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1a8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x4a8]
call fcn.1006c080
cmp dword [ebp - 0x194], 0x10
lea eax, [ebp - 0x1a8]
mov edx, str.wleOCP
lea ecx, [ebp - 0x4c0]
cmovae eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x544], eax
lea eax, [ebp - 0x3d0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1c0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x4c0]
call fcn.1006c080
cmp dword [ebp - 0x1ac], 0x10
lea eax, [ebp - 0x1c0]
mov edx, str.wleOCP
lea ecx, [ebp - 0x4d8]
cmovae eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x548], eax
lea eax, [ebp - 0x370]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1d8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x4d8]
call fcn.1006c080
cmp dword [ebp - 0x1c4], 0x10
lea eax, [ebp - 0x1d8]
mov edx, str.wleOCP
lea ecx, [ebp - 0x3e8]
cmovae eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x54c], eax
lea eax, [ebp - 0x388]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1f0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x3e8]
call fcn.1006c080
cmp dword [ebp - 0x1dc], 0x10
lea eax, [ebp - 0x1f0]
mov edx, str.wleOCP
lea ecx, [ebp - 0x400]
cmovae eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x530], eax
lea eax, [ebp - 0x3b8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x208]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x400]
call fcn.1006c080
cmp dword [ebp - 0x1f4], 0x10
lea eax, [ebp - 0x208]
mov edx, str.wleOCP
lea ecx, [ebp - 0x418]
cmovae eax, dword [ebp - 0x208]
mov dword [ebp - 0x550], eax
lea eax, [ebp - 0x358]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x220]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x418]
call fcn.1006c080
cmp dword [ebp - 0x20c], 0x10
lea eax, [ebp - 0x220]
cmovae eax, dword [ebp - 0x220]
mov dword [ebp - 0x554], eax
call fcn.10063c60
lea eax, [ebp - 0x28]
mov edx, str.wleN
push eax
lea ecx, [ebp - 0x268]
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x268]
call fcn.1006c080
cmp dword [ebp - 0x224], 0x10
lea eax, [ebp - 0x238]
mov ecx, 0xc9bee4
cmovae eax, dword [ebp - 0x238]
mov dword [ebp - 0x558], eax
call fcn.10074bd0
mov ecx, 0xc9bee8
mov word [0x10200414], ax
call fcn.10074bd0
mov ax, word [0x10200414]
mov ecx, 0xc9bee4
shr ax, 1
mov word [0x1023066c], ax
call fcn.10074bd0
mov ecx, 0xc9bee8
mov word [0x10200414], ax
call fcn.10074bd0
movzx esi, word [0x10200414]
mov eax, 0x66666667
mov ecx, esi
shr ecx, 1
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov word [0x1023066c], ax
mov eax, 0xcccccccd
mul esi
mov esi, 0x582050
shr edx, 2
movzx eax, dx
push eax
movzx eax, byte [0x102406af]
push 0
push eax
mov word [0x10150340], dx
call esi
movzx eax, word [0x10150340]
push eax
movzx eax, byte [0x102406af]
push 1
push eax
call esi
movzx eax, word [0x10150340]
push eax
movzx eax, byte [0x102406af]
push 2
push eax
call esi
push 0x100bce7c
mov edx, 0x100bd1ec
lea ecx, [ebp - 0x430]
call fcn.1006ccd0
push str._enable_slot
mov edx, eax
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x268]
call fcn.1006d3f0
add esp, 0x2c
mov ecx, 0x100bd36c
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x268]
call fcn.1006c080
lea ecx, [ebp - 0x430]
mov byte [ebp - 4], 0x4b
call fcn.1006c080
call fcn.10075020
cmp dword [0x100bd380], 0x10
mov edx, 0x100bd36c
mov ecx, 0x100bd584
cmovae edx, dword [0x100bd36c]
cmp dword [0x100bd598], 0x10
push 0x1015034b
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b610
add esp, 8
mov edx, 1
cmp dword [0x101903c0], 6
jl 0x10033b56
push edx
jmp 0x10033b5e
movzx eax, byte [0x1015034b]
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
add esp, 4
mov edx, 2
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 3
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 4
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 5
push eax
call fcn.1006cf00
mov edx, str.Helicopters
mov ecx, str.wleHELI
call fcn.1006d090
mov edx, str.Pilots
mov ecx, str.wlePILO
call fcn.1006d090
mov edx, str.Occupants
mov ecx, str.wle_OCC
call fcn.1006d090
mov edx, str.Max_Helicopters
mov ecx, str.wleHMAX
call fcn.1006d090
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x102406af]
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x4dc]
push dword [ebp - 0x4e0]
push dword [ebp - 0x540]
push dword [ebp - 0x53c]
push dword [ebp - 0x568]
push edi
push str.wleHELI
push 0
push eax
call fcn.10011230
add esp, 0x4c
movzx eax, byte [0x102406af]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.wleHMAX
push dword [ebp - 0x538]
push dword [ebp - 0x534]
push dword [ebp - 0x56c]
push dword [ebp - 0x564]
push dword [ebp - 0x560]
push dword [ebp - 0x55c]
push str.wlePILO
push 1
push eax
call fcn.10011230
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x558]
movzx eax, byte [0x102406af]
push dword [ebp - 0x554]
push dword [ebp - 0x550]
push dword [ebp - 0x530]
push dword [ebp - 0x54c]
push dword [ebp - 0x548]
push dword [ebp - 0x544]
push str.wle_OCC
push 2
push eax
call fcn.10011230
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0x28]
add esp, 0x78
mov dword [0x102f2b30], eax
mov byte [0x10200476], 0xff
call fcn.1006c080
lea ecx, [ebp - 0x358]
call fcn.1006c080
lea ecx, [ebp - 0x3b8]
call fcn.1006c080
lea ecx, [ebp - 0x388]
call fcn.1006c080
lea ecx, [ebp - 0x370]
call fcn.1006c080
lea ecx, [ebp - 0x3d0]
call fcn.1006c080
lea ecx, [ebp - 0x3a0]
call fcn.1006c080
lea ecx, [ebp - 0x340]
call fcn.1006c080
lea ecx, [ebp - 0x328]
call fcn.1006c080
lea ecx, [ebp - 0x310]
call fcn.1006c080
lea ecx, [ebp - 0x2f8]
call fcn.1006c080
lea ecx, [ebp - 0x2e0]
call fcn.1006c080
lea ecx, [ebp - 0x2c8]
call fcn.1006c080
lea ecx, [ebp - 0x2b0]
call fcn.1006c080
lea ecx, [ebp - 0x298]
call fcn.1006c080
lea ecx, [ebp - 0x280]
call fcn.1006c080
lea ecx, [ebp - 0x250]
call fcn.1006c080
lea ecx, [ebp - 0x70]
call fcn.1006c080
lea ecx, [ebp - 0x58]
call fcn.1006c080
lea ecx, [ebp - 0x238]
call fcn.1006c080
lea ecx, [ebp - 0x220]
call fcn.1006c080
lea ecx, [ebp - 0x208]
call fcn.1006c080
lea ecx, [ebp - 0x1f0]
call fcn.1006c080
lea ecx, [ebp - 0x1d8]
call fcn.1006c080
lea ecx, [ebp - 0x1c0]
call fcn.1006c080
lea ecx, [ebp - 0x1a8]
call fcn.1006c080
lea ecx, [ebp - 0x190]
call fcn.1006c080
lea ecx, [ebp - 0x178]
call fcn.1006c080
lea ecx, [ebp - 0x148]
call fcn.1006c080
lea ecx, [ebp - 0x160]
call fcn.1006c080
lea ecx, [ebp - 0x130]
call fcn.1006c080
lea ecx, [ebp - 0xe8]
call fcn.1006c080
lea ecx, [ebp - 0x88]
call fcn.1006c080
lea ecx, [ebp - 0xa0]
call fcn.1006c080
lea ecx, [ebp - 0xb8]
call fcn.1006c080
lea ecx, [ebp - 0xd0]
call fcn.1006c080
lea ecx, [ebp - 0x100]
call fcn.1006c080
lea ecx, [ebp - 0x118]
call fcn.1006c080
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007547f
mov esp, ebp
pop ebp
ret
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
int3