Function at 0x10033ee0
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100951d8
mov eax, dword fs:[0]
push eax
sub esp, 0x530
mov eax, dword [0x100bc010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, str.Planes
mov dword [ebp - 0x4b0], 0
mov ecx, 0x100bd078
call fcn.1006cdc0
test al, al
je 0x10035bf8
call fcn.10075020
push eax
call fcn.1000d760
mov dword [0x100bca84], eax
test eax, eax
jne 0x10035bf8
mov edx, str.none
mov ecx, 0x100bd078
call fcn.1006cdc0
test al, al
je 0x10033f6b
movzx eax, byte [0x102406af]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 6
push str.Planes
mov ecx, 0x100bd078
call fcn.1006c240
cmp dword [0x100bdd04], 0x10
lea ecx, [ebp - 0x4b0]
mov eax, 0x100bdcf0
mov dword [0x100bcd00], 8
cmovae eax, dword [0x100bdcf0]
push 0x582432
mov dword [0x100d02c8], eax
call fcn.1000fbc0
mov esi, dword [ebp - 0x4b0]
lea eax, [ebp - 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
push esi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 6
cmp byte [ebp - 0x14], 0
je 0x10033ffa
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x4b0]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x4b0], eax
push dword [ebp - 0x20]
call edi
push ecx
mov dl, 6
mov ecx, 0x58242b
call fcn.100749d0
add esp, 4
mov eax, 0x582300
push 0
push 1
push 1
push 3
sub esp, 0xc
mov dword [esp + 8], 0x435c0000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x100d02c8]
push 0
call eax
add esp, 0x24
mov byte [0x102406af], al
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 1
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_model1
cmp eax, 0xd
jb 0x100340ce
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x100340e5
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xd
call fcn.1006df70
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x100], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xf0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10034159
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003414f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c13
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4b4], 0x1dc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 6
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_model2
cmp eax, 0xd
jb 0x100341eb
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x10034202
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xd
call fcn.1006df70
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x118], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x108], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10034276
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1003426c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c18
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4b8], 0x1dc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 0x1a
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_model3
cmp eax, 0xd
jb 0x10034308
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x1003431f
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xd
call fcn.1006df70
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10034393
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034389
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c1d
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4bc], 0x1dc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 0x6a
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_model4
cmp eax, 0xd
jb 0x10034425
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x1003443c
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xd
call fcn.1006df70
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100344b0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100344a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c22
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4c8], 0x1dc
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 0x1aa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_model5
cmp eax, 0xd
jb 0x10034542
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x10034559
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xd
call fcn.1006df70
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100345cd
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100345c3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c27
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4c0], 0x1dc
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 0x6aa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xd
push str._plane_model6
cmp eax, 0xd
jb 0x1003465f
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xd]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xd], 0
lea eax, [ebp - 0x28]
jmp 0x10034676
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xd
call fcn.1006df70
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100346e1
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100346d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c2c
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4c4], 0x1dc
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 0x1aaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xe
push str._plane_pilot_1
cmp eax, 0xe
jb 0x10034773
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xe]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xe], 0
lea eax, [ebp - 0x28]
jmp 0x1003478a
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xe
call fcn.1006df70
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100347f2
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100347e8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c31
push edx
push ecx
call fcn.100754c5
add esp, 8
mov dword [ebp - 0x4d4], 0xa5
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
mov eax, dword [0x100bce8c]
add eax, dword [0x100bd1fc]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4b0], 0x6aaa
call fcn.1006eca0
push 0x100bd1ec
lea ecx, [ebp - 0x28]
call fcn.1006bf70
push 0x100bce7c
lea ecx, [ebp - 0x28]
call fcn.1006bf70
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xe
push str._plane_pilot_2
cmp eax, 0xe
jb 0x10034884
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xe]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.10078590
add esp, 0xc
mov byte [esi + 0xe], 0
lea eax, [ebp - 0x28]
jmp 0x1003489b
mov byte [ebp - 0x4ac], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x4ac]
push 0xe
call fcn.1006df70
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xd0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1003490f
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10034905
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10035c36
push edx
push ecx
call fcn.100754c5
add esp, 8
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x4d0], 0xa5
call fcn.1006ccd0
push str._plane_pilot_3
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x148]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x1a
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4cc], 0xa5
lea ecx, [ebp - 0x40]
call fcn.1006ccd0
push str._plane_pilot_4
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x160]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4d8], 0xa5
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
push str._plane_pilot_5
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x178]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x20
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4fc], 0xa5
lea ecx, [ebp - 0x40]
call fcn.1006ccd0
push str._plane_pilot_6
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x130]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x23
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4f8], 0xa5
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x190]
push str._plane_occupants1
mov edx, eax
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x26
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4f4], 1
lea ecx, [ebp - 0x40]
call fcn.1006ccd0
push str._plane_occupants2
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1a8]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x29
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4f0], 1
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
push str._plane_occupants3
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1c0]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2c
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4ec], 1
lea ecx, [ebp - 0x40]
call fcn.1006ccd0
push str._plane_occupants4
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1d8]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2f
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4e8], 1
lea ecx, [ebp - 0x58]
call fcn.1006ccd0
push str._plane_occupants5
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1f0]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x32
call fcn.1006c080
push 0x100bce7c
mov edx, 0x100bd1ec
mov dword [ebp - 0x4e4], 1
lea ecx, [ebp - 0x40]
call fcn.1006ccd0
push str._plane_occupants6
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x208]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x35
call fcn.1006c080
mov dword [ebp - 0x4e0], 1
call fcn.10075020
cmp dword [ebp - 0xec], 0x10
lea edx, [ebp - 0x100]
lea esi, [ebp - 0x4b4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x100]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x104], 0x10
lea edx, [ebp - 0x118]
lea esi, [ebp - 0x4b8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x118]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xd4], 0x10
lea edx, [ebp - 0xe8]
lea esi, [ebp - 0x4bc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xe8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xa4], 0x10
lea edx, [ebp - 0xb8]
lea esi, [ebp - 0x4c8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xb8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x8c], 0x10
lea edx, [ebp - 0xa0]
lea esi, [ebp - 0x4c0]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xa0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x74], 0x10
lea edx, [ebp - 0x88]
lea esi, [ebp - 0x4c4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x88]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x5c], 0x10
lea edx, [ebp - 0x70]
cmovae edx, dword [ebp - 0x70]
lea esi, [ebp - 0x4d4]
cmp dword [0x100bd598], 0x10
mov ecx, 0x100bd584
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0xbc], 0x10
lea edx, [ebp - 0xd0]
lea esi, [ebp - 0x4d0]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0xd0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
add esp, 0x40
call fcn.10075020
cmp dword [ebp - 0x134], 0x10
lea edx, [ebp - 0x148]
lea esi, [ebp - 0x4cc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x148]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x14c], 0x10
lea edx, [ebp - 0x160]
lea esi, [ebp - 0x4d8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x160]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x164], 0x10
lea edx, [ebp - 0x178]
lea esi, [ebp - 0x4fc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x178]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x11c], 0x10
lea edx, [ebp - 0x130]
lea esi, [ebp - 0x4f8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x130]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x17c], 0x10
lea edx, [ebp - 0x190]
lea esi, [ebp - 0x4f4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x190]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x194], 0x10
lea edx, [ebp - 0x1a8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1a8]
cmp dword [0x100bd598], 0x10
cmovae ecx, dword [0x100bd584]
lea esi, [ebp - 0x4f0]
push esi
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x1ac], 0x10
lea edx, [ebp - 0x1c0]
lea esi, [ebp - 0x4ec]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1c0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x1c4], 0x10
lea edx, [ebp - 0x1d8]
lea esi, [ebp - 0x4e8]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1d8]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
add esp, 0x40
call fcn.10075020
cmp dword [ebp - 0x1dc], 0x10
lea edx, [ebp - 0x1f0]
lea esi, [ebp - 0x4e4]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x1f0]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
call fcn.10075020
cmp dword [ebp - 0x1f4], 0x10
lea edx, [ebp - 0x208]
lea esi, [ebp - 0x4e0]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x208]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
mov edx, dword [ebp - 0x4b4]
lea ecx, [ebp - 0x58]
add esp, 0x10
sub edx, 0x190
mov dword [ebp - 0x4b4], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x4b8]
sub edx, 0x190
mov dword [ebp - 0x4b8], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x250]
mov edx, dword [ebp - 0x4bc]
sub edx, 0x190
mov dword [ebp - 0x4bc], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x268]
mov edx, dword [ebp - 0x4c8]
sub edx, 0x190
mov dword [ebp - 0x4c8], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x4c0]
sub edx, 0x190
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x4c0], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x298]
mov edx, dword [ebp - 0x4c4]
sub edx, 0x190
mov dword [ebp - 0x4c4], edx
call fcn.1000fa20
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x2b0]
mov edx, dword [ebp - 0x4d4]
call fcn.1000fa20
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x2c8]
mov edx, dword [ebp - 0x4d0]
call fcn.1000fa20
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2e0]
mov edx, dword [ebp - 0x4cc]
call fcn.1000fa20
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2f8]
mov edx, dword [ebp - 0x4d8]
call fcn.1000fa20
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x310]
mov edx, dword [ebp - 0x4fc]
call fcn.1000fa20
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x328]
mov edx, dword [ebp - 0x4f8]
call fcn.1000fa20
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x3a0]
mov edx, dword [ebp - 0x4f4]
call fcn.1000fa20
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3b8]
mov edx, dword [ebp - 0x4f0]
call fcn.1000fa20
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x358]
mov edx, dword [ebp - 0x4ec]
call fcn.1000fa20
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x370]
mov edx, dword [ebp - 0x4e8]
call fcn.1000fa20
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x388]
mov edx, dword [ebp - 0x4e4]
call fcn.1000fa20
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x340]
mov edx, dword [ebp - 0x4e0]
call fcn.1000fa20
mov byte [ebp - 4], 0x47
call fcn.1004ba70
call fcn.10052900
call fcn.10059c10
call fcn.1005fd40
cmp byte [0x10110338], 0
je 0x1003519c
call fcn.1004ee10
call fcn.10055fc0
call fcn.1005c6b0
lea eax, [ebp - 0x58]
mov edx, 0x100a4624
push eax
lea ecx, [ebp - 0x28]
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x100]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0xec], 0x10
lea eax, [ebp - 0x40]
lea edi, [ebp - 0x100]
mov edx, 0x100a4624
cmovae edi, dword [ebp - 0x100]
lea ecx, [ebp - 0x28]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x118]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0x104], 0x10
lea eax, [ebp - 0x118]
mov edx, 0x100a4624
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0x118]
mov dword [ebp - 0x514], eax
lea eax, [ebp - 0x250]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xe8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
mov edx, 0x100a4624
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0xe8]
mov dword [ebp - 0x510], eax
lea eax, [ebp - 0x268]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov edx, 0x100a4624
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x50c], eax
lea eax, [ebp - 0x280]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xa0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov edx, 0x100a4624
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x4b0], eax
lea eax, [ebp - 0x298]
push eax
call fcn.1006d1c0
add esp, 4
push eax
lea ecx, [ebp - 0x88]
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov edx, 0x100a4628
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x4ac], eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x70]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov edx, 0x100a4628
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0x530], eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0xd0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
mov edx, 0x100a4628
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x534], eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x148]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0x134], 0x10
lea eax, [ebp - 0x148]
mov edx, 0x100a4628
lea ecx, [ebp - 0x28]
cmovae eax, dword [ebp - 0x148]
mov dword [ebp - 0x53c], eax
lea eax, [ebp - 0x2f8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x160]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x28]
call fcn.1006c080
cmp dword [ebp - 0x14c], 0x10
lea eax, [ebp - 0x160]
mov edx, 0x100a4628
lea ecx, [ebp - 0x430]
cmovae eax, dword [ebp - 0x160]
mov dword [ebp - 0x504], eax
lea eax, [ebp - 0x310]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x178]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x430]
call fcn.1006c080
cmp dword [ebp - 0x164], 0x10
lea eax, [ebp - 0x178]
cmovae eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x448]
mov dword [ebp - 0x508], eax
mov edx, 0x100a4628
lea eax, [ebp - 0x328]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x448]
call fcn.1006c080
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov edx, str.wleOCP
lea ecx, [ebp - 0x460]
cmovae eax, dword [ebp - 0x130]
mov dword [ebp - 0x538], eax
lea eax, [ebp - 0x3a0]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x190]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x460]
call fcn.1006c080
cmp dword [ebp - 0x17c], 0x10
lea eax, [ebp - 0x190]
mov edx, str.wleOCP
lea ecx, [ebp - 0x478]
cmovae eax, dword [ebp - 0x190]
mov dword [ebp - 0x518], eax
lea eax, [ebp - 0x3b8]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1a8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x478]
call fcn.1006c080
cmp dword [ebp - 0x194], 0x10
lea eax, [ebp - 0x1a8]
mov edx, str.wleOCP
lea ecx, [ebp - 0x490]
cmovae eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x51c], eax
lea eax, [ebp - 0x358]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1c0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x490]
call fcn.1006c080
cmp dword [ebp - 0x1ac], 0x10
lea eax, [ebp - 0x1c0]
mov edx, str.wleOCP
lea ecx, [ebp - 0x4a8]
cmovae eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x520], eax
lea eax, [ebp - 0x370]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1d8]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x4a8]
call fcn.1006c080
cmp dword [ebp - 0x1c4], 0x10
lea eax, [ebp - 0x1d8]
mov edx, str.wleOCP
lea ecx, [ebp - 0x3d0]
cmovae eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x500], eax
lea eax, [ebp - 0x388]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x1f0]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x3d0]
call fcn.1006c080
cmp dword [ebp - 0x1dc], 0x10
lea eax, [ebp - 0x1f0]
mov edx, str.wleOCP
lea ecx, [ebp - 0x3e8]
cmovae eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x524], eax
lea eax, [ebp - 0x340]
push eax
call fcn.1006d1c0
add esp, 4
lea ecx, [ebp - 0x208]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x3e8]
call fcn.1006c080
cmp dword [ebp - 0x1f4], 0x10
lea eax, [ebp - 0x208]
push 0x100bce7c
cmovae eax, dword [ebp - 0x208]
lea ecx, [ebp - 0x400]
mov edx, 0x100bd1ec
mov dword [ebp - 0x528], eax
call fcn.1006ccd0
push str._max_planes
mov edx, eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x220]
call fcn.1006d3f0
add esp, 8
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x4a
call fcn.1006c080
mov dword [ebp - 0x4dc], 1
call fcn.10075020
cmp dword [ebp - 0x20c], 0x10
lea edx, [ebp - 0x220]
lea esi, [ebp - 0x4dc]
mov ecx, 0x100bd584
cmovae edx, dword [ebp - 0x220]
cmp dword [0x100bd598], 0x10
push esi
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b2f0
mov edx, dword [ebp - 0x4dc]
lea ecx, [ebp - 0x28]
call fcn.1000fa20
mov byte [ebp - 4], 0x4b
call fcn.10063c60
lea eax, [ebp - 0x28]
mov edx, str.wleN
push eax
lea ecx, [ebp - 0x238]
call fcn.1006d1c0
add esp, 0xc
lea ecx, [ebp - 0x220]
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x238]
call fcn.1006c080
cmp dword [ebp - 0x20c], 0x10
lea eax, [ebp - 0x220]
mov ecx, 0xc9bee4
cmovae eax, dword [ebp - 0x220]
mov dword [ebp - 0x52c], eax
call fcn.10074bd0
mov ecx, 0xc9bee8
mov word [0x10200414], ax
call fcn.10074bd0
mov ax, word [0x10200414]
shr ax, 1
mov ecx, 0xc9bee4
mov word [0x1023066c], ax
call fcn.10074bd0
mov ecx, 0xc9bee8
mov word [0x10200414], ax
call fcn.10074bd0
movzx esi, word [0x10200414]
mov eax, 0x66666667
mov ecx, esi
shr ecx, 1
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov word [0x1023066c], ax
mov eax, 0xcccccccd
mul esi
mov esi, 0x582050
shr edx, 2
movzx eax, dx
push eax
movzx eax, byte [0x102406af]
push 0
push eax
mov word [0x10150340], dx
call esi
movzx eax, word [0x10150340]
push eax
movzx eax, byte [0x102406af]
push 1
push eax
call esi
movzx eax, word [0x10150340]
push eax
movzx eax, byte [0x102406af]
push 2
push eax
call esi
push 0x100bce7c
mov edx, 0x100bd1ec
lea ecx, [ebp - 0x418]
call fcn.1006ccd0
push str._enable_slot
mov edx, eax
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x238]
call fcn.1006d3f0
add esp, 0x2c
mov ecx, 0x100bd36c
push eax
call fcn.1006c0d0
lea ecx, [ebp - 0x238]
call fcn.1006c080
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0x4b
call fcn.1006c080
call fcn.10075020
cmp dword [0x100bd380], 0x10
mov edx, 0x100bd36c
mov ecx, 0x100bd584
cmovae edx, dword [0x100bd36c]
cmp dword [0x100bd598], 0x10
push 0x1015034b
cmovae ecx, dword [0x100bd584]
push eax
call fcn.1006b610
add esp, 8
mov edx, 1
cmp dword [0x101903c0], 6
jl 0x100358b9
push edx
jmp 0x100358c1
movzx eax, byte [0x1015034b]
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
add esp, 4
mov edx, 2
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 3
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 4
push eax
call fcn.1006cf00
movzx eax, byte [0x1015034b]
mov edx, 5
push eax
call fcn.1006cf00
mov edx, str.Planes
mov ecx, str.wlePLNS
call fcn.1006d090
mov edx, str.Pilots
mov ecx, str.wlePILO
call fcn.1006d090
mov edx, str.Boats
mov ecx, str.wleBOTS
call fcn.1006d090
mov edx, str.Occupants
mov ecx, str.wle_OCC
call fcn.1006d090
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x102406af]
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x4ac]
push dword [ebp - 0x4b0]
push dword [ebp - 0x50c]
push dword [ebp - 0x510]
push dword [ebp - 0x514]
push edi
push str.wlePLNS
push 0
push eax
call fcn.10011230
add esp, 0x4c
movzx eax, byte [0x102406af]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.HDRATT
push str.wleMAXP
push dword [ebp - 0x538]
push dword [ebp - 0x508]
push dword [ebp - 0x504]
push dword [ebp - 0x53c]
push dword [ebp - 0x534]
push dword [ebp - 0x530]
push str.wlePILO
push 1
push eax
call fcn.10011230
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x52c]
movzx eax, byte [0x102406af]
push dword [ebp - 0x528]
push dword [ebp - 0x524]
push dword [ebp - 0x500]
push dword [ebp - 0x520]
push dword [ebp - 0x51c]
push dword [ebp - 0x518]
push str.wle_OCC
push 2
push eax
call fcn.10011230
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0x28]
add esp, 0x78
mov dword [0x102f2b30], eax
mov byte [0x10200476], 0xff
call fcn.1006c080
lea ecx, [ebp - 0x220]
call fcn.1006c080
lea ecx, [ebp - 0x340]
call fcn.1006c080
lea ecx, [ebp - 0x388]
call fcn.1006c080
lea ecx, [ebp - 0x370]
call fcn.1006c080
lea ecx, [ebp - 0x358]
call fcn.1006c080
lea ecx, [ebp - 0x3b8]
call fcn.1006c080
lea ecx, [ebp - 0x3a0]
call fcn.1006c080
lea ecx, [ebp - 0x328]
call fcn.1006c080
lea ecx, [ebp - 0x310]
call fcn.1006c080
lea ecx, [ebp - 0x2f8]
call fcn.1006c080
lea ecx, [ebp - 0x2e0]
call fcn.1006c080
lea ecx, [ebp - 0x2c8]
call fcn.1006c080
lea ecx, [ebp - 0x2b0]
call fcn.1006c080
lea ecx, [ebp - 0x298]
call fcn.1006c080
lea ecx, [ebp - 0x280]
call fcn.1006c080
lea ecx, [ebp - 0x268]
call fcn.1006c080
lea ecx, [ebp - 0x250]
call fcn.1006c080
lea ecx, [ebp - 0x40]
call fcn.1006c080
lea ecx, [ebp - 0x58]
call fcn.1006c080
lea ecx, [ebp - 0x208]
call fcn.1006c080
lea ecx, [ebp - 0x1f0]
call fcn.1006c080
lea ecx, [ebp - 0x1d8]
call fcn.1006c080
lea ecx, [ebp - 0x1c0]
call fcn.1006c080
lea ecx, [ebp - 0x1a8]
call fcn.1006c080
lea ecx, [ebp - 0x190]
call fcn.1006c080
lea ecx, [ebp - 0x130]
call fcn.1006c080
lea ecx, [ebp - 0x178]
call fcn.1006c080
lea ecx, [ebp - 0x160]
call fcn.1006c080
lea ecx, [ebp - 0x148]
call fcn.1006c080
lea ecx, [ebp - 0xd0]
call fcn.1006c080
lea ecx, [ebp - 0x70]
call fcn.1006c080
lea ecx, [ebp - 0x88]
call fcn.1006c080
lea ecx, [ebp - 0xa0]
call fcn.1006c080
lea ecx, [ebp - 0xb8]
call fcn.1006c080
lea ecx, [ebp - 0xe8]
call fcn.1006c080
lea ecx, [ebp - 0x118]
call fcn.1006c080
lea ecx, [ebp - 0x100]
call fcn.1006c080
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007547f
mov esp, ebp
pop ebp
ret
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
call fcn.100835ce
int3