Function at 0x1002f710
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10059398
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x1006a010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0xec], 0
lea ecx, [ebp - 0x2bc]
call fcn.10009ae0
mov ecx, str.WantedLevelEditor.xml
mov dword [ebp - 4], 0
call fcn.1003bb90
push eax
lea ecx, [ebp - 0x2bc]
call fcn.10009f70
test eax, eax
jne 0x10030555
mov edx, str.Motors_
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x10030555
push 0x10
push str._bike_occupants_
mov ecx, 0x1006b388
call fcn.10037420
mov edx, str.none
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x1002f7c7
movzx eax, byte [0x100ec940]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 7
push str.Motors_
mov ecx, 0x1006ad80
call fcn.10037420
mov eax, dword [0x1025c244]
test al, 1
jne 0x1002f80c
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
mov esi, 0x582029
mov dword [ebp - 0x1c], 4
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 3
cmp byte [ebp - 0x14], 0
je 0x1002f857
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xec]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0xec], eax
push dword [ebp - 0x20]
call edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006b1b8]
inc eax
mov dword [ebp - 0x18], 0
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 1
call fcn.10038e60
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x1006359c
cmp eax, 1
jb 0x1002f8bd
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x1002f8d4
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 1
call fcn.10038840
push 0x1006b1a8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x10063598
cmp eax, 1
jb 0x1002f91b
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
lea eax, [ebp - 0x28]
jmp 0x1002f932
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 1
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 3
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af38
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10037170
mov ecx, 0x1006b3b8
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xa0]
push eax
movq qword [ebp - 0x90], xmm0
call fcn.100372d0
mov edx, dword [ebp - 0x8c]
cmp edx, 0x10
jb 0x1002f9f0
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f9e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003057b
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x1002fa28
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fa1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030580
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
cmp edx, 0x10
jb 0x1002fa72
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fa68
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030585
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b3cc], 0x10
lea ecx, [ebp - 0xb8]
movzx edx, byte [0x1006c840]
mov eax, 0x1006b3b8
cmovae eax, dword [0x1006b3b8]
mov dword [0x1013c9b0], eax
call fcn.1000c860
push eax
mov ecx, 0x1006af68
call fcn.100372d0
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x1002fae1
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fad7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003058a
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0xe
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 8
push str._copbike
cmp eax, 8
jb 0x1002fb69
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 8]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 8], 0
lea eax, [ebp - 0x28]
jmp 0x1002fb80
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 8
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0x1e
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.10037170
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x1002fc36
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fc2c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003058f
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002fc80
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fc76
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030594
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0xf4], 0x1cf
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0x76
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 8
push str._bikeped
cmp eax, 8
jb 0x1002fd12
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 8]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 8], 0
lea eax, [ebp - 0x28]
jmp 0x1002fd29
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 8
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0xf6
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.10037170
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x1002fddc
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fdd2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10030599
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002fe26
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fe1c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003059e
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0xf8], 0x11b
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0x3b6
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x10
push str._bike_occupants_
cmp eax, 0x10
jb 0x1002feb8
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x10]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0x10], 0
lea eax, [ebp - 0x28]
jmp 0x1002fecf
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0x10
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0x7b6
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.10037170
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x1002ff82
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ff78
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100305a3
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x1002ffcc
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ffc2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100305a8
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10030064
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1003005d
cmp dword [ebp - 0xec], 0
je 0x10030066
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10030038
xor eax, eax
jmp 0x10030040
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10030066
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10030066
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030010
xor edi, edi
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x100300d8
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100300d1
cmp dword [ebp - 0xec], 0
je 0x100300da
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x100300ac
xor eax, eax
jmp 0x100300b4
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x100300da
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x100300da
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030084
xor edi, edi
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10030164
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1003015d
cmp dword [ebp - 0xec], 0
je 0x10030166
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10030138
xor eax, eax
jmp 0x10030140
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10030166
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10030166
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030110
xor edi, edi
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x100301d4
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100301cd
cmp dword [ebp - 0xec], 0
je 0x100301d6
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x100301a8
xor eax, eax
jmp 0x100301b0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x100301d6
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x100301d6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030180
xor edi, edi
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x1003025b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10030254
cmp dword [ebp - 0xec], 0
je 0x1003025d
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1003022f
xor eax, eax
jmp 0x10030237
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x1003025d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1003025d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030207
xor edi, edi
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x100302c9
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100302c2
cmp dword [ebp - 0xec], 0
je 0x100302cb
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x1003029d
xor eax, eax
jmp 0x100302a5
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x100302cb
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x100302cb
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030275
xor edi, edi
lea eax, [ebp - 0xfc]
mov ecx, edi
push eax
call fcn.10009370
mov edx, dword [ebp - 0xf4]
xor eax, eax
mov ecx, dword [ebp - 0xf8]
mov esi, dword [ebp - 0xfc]
nop dword [eax]
test edx, edx
je 0x100302fc
test ecx, ecx
je 0x100302fc
test esi, esi
jne 0x10030307
inc eax
cmp eax, 0xffffffff
jb 0x100302f0
jmp 0x1003053a
sub edx, 0x190
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xf4], edx
call fcn.1000c860
push eax
lea ecx, [ebp - 0x88]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
mov edx, dword [ebp - 0xf8]
lea ecx, [ebp - 0xd0]
call fcn.1000c860
push eax
lea ecx, [ebp - 0x70]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0xd0]
call fcn.1000c860
push eax
lea ecx, [ebp - 0x58]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
lea eax, [ebp - 0x88]
mov edx, 0x100637f4
push eax
lea ecx, [ebp - 0xb8]
call fcn.10037c50
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 0x10
lea ecx, [ebp - 0xe8]
mov edx, 0x100637f8
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x70]
push eax
call fcn.10037c50
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x58]
cmp dword [ebp - 0xd4], 0x10
lea edi, [ebp - 0xe8]
push eax
cmovae edi, dword [ebp - 0xe8]
lea ecx, [ebp - 0xa0]
mov edx, 0x10064f08
call fcn.10037c50
add esp, 0xc
push 1
mov byte [ebp - 4], 0x14
lea esi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0x10
mov eax, 0x582300
push 1
cmovae esi, dword [ebp - 0xa0]
push 1
push 2
sub esp, 0xc
mov dword [esp + 8], 0x42480000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x1013c9b0]
push 0
call eax
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, al
push str.DUMMY
mov dword [0x100ec940], eax
push 0x10065208
push str.CHAR
push str.VHCL
push dword [0x1012c980]
push 0
push eax
mov eax, 0x581e00
call eax
add esp, 0x60
movzx eax, byte [0x100ec940]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push esi
push edi
push dword [ebp - 0xf0]
push str.DUMMY
push 1
push eax
mov eax, 0x581e00
call eax
movzx eax, byte [0x100ec940]
mov esi, 0x582050
push 0xfa
push 0
push eax
call esi
movzx eax, byte [0x100ec940]
add esp, 0x48
push 0xfa
push 1
push eax
call esi
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0xa0]
add esp, 0xc
mov dword [0x1025b6c8], eax
call fcn.10037280
lea ecx, [ebp - 0xe8]
call fcn.10037280
lea ecx, [ebp - 0xb8]
call fcn.10037280
lea ecx, [ebp - 0x58]
call fcn.10037280
lea ecx, [ebp - 0x70]
call fcn.10037280
lea ecx, [ebp - 0x88]
call fcn.10037280
lea ecx, [ebp - 0x2bc]
call fcn.10009d40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003bfa7
mov esp, ebp
pop ebp
ret
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
int3