Function at 0x100305b0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10059398
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x1006a010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0xec], 0
lea ecx, [ebp - 0x2bc]
call fcn.10009ae0
mov ecx, str.WantedLevelEditor.xml
mov dword [ebp - 4], 0
call fcn.1003bb90
push eax
lea ecx, [ebp - 0x2bc]
call fcn.10009f70
test eax, eax
jne 0x100313f5
mov edx, str.Helis_
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x100313f5
push 0x15
push str._helicopter_occupants
mov ecx, 0x1006b388
call fcn.10037420
mov edx, str.none
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x10030667
movzx eax, byte [0x100ec940]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 6
push str.Helis_
mov ecx, 0x1006ad80
call fcn.10037420
mov eax, dword [0x1025c244]
test al, 1
jne 0x100306ac
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
mov esi, 0x582029
mov dword [ebp - 0x1c], 4
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 3
cmp byte [ebp - 0x14], 0
je 0x100306f7
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xec]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0xec], eax
push dword [ebp - 0x20]
call edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006b1b8]
inc eax
mov dword [ebp - 0x18], 0
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 1
call fcn.10038e60
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x1006359c
cmp eax, 1
jb 0x1003075d
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x10030774
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 1
call fcn.10038840
push 0x1006b1a8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x10063598
cmp eax, 1
jb 0x100307bb
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
lea eax, [ebp - 0x28]
jmp 0x100307d2
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 1
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 3
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af38
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10037170
mov ecx, 0x1006b3b8
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0xa0]
push eax
movq qword [ebp - 0x90], xmm0
call fcn.100372d0
mov edx, dword [ebp - 0x8c]
cmp edx, 0x10
jb 0x10030890
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030886
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003141b
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x100308c8
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100308be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031420
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
cmp edx, 0x10
jb 0x10030912
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030908
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031425
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b3cc], 0x10
lea ecx, [ebp - 0xb8]
movzx edx, byte [0x1006c840]
mov eax, 0x1006b3b8
cmovae eax, dword [0x1006b3b8]
mov dword [0x1013c9b0], eax
call fcn.1000c860
push eax
mov ecx, 0x1006af68
call fcn.100372d0
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x10030981
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030977
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003142a
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0xe
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0xb
push str._helicopter
cmp eax, 0xb
jb 0x10030a09
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0xb]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0xb], 0
lea eax, [ebp - 0x28]
jmp 0x10030a20
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0xb
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0x1e
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.10037170
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10030ad6
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030acc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003142f
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10030b20
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030b16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031434
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0xf4], 0x1e7
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0x76
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x11
push str._helicopter_pilot
cmp eax, 0x11
jb 0x10030bb2
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x11]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0x11], 0
lea eax, [ebp - 0x28]
jmp 0x10030bc9
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0x11
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0xf6
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 9
call fcn.10037170
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10030c7c
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030c72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031439
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10030cc6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030cbc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003143e
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0xf8], 0x11b
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xec], 0x3b6
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 0x15
push str._helicopter_occupants
cmp eax, 0x15
jb 0x10030d58
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 0x15]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 0x15], 0
lea eax, [ebp - 0x28]
jmp 0x10030d6f
mov byte [ebp - 0xf0], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0xf0]
push 0x15
call fcn.10038840
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0xec], 0x7b6
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af68
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xe
call fcn.10037170
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x10030e22
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030e18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031443
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10030e6c
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10030e62
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10031448
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10030f04
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10030efd
cmp dword [ebp - 0xec], 0
je 0x10030f06
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10030ed8
xor eax, eax
jmp 0x10030ee0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10030f06
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10030f06
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030eb0
xor edi, edi
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10030f78
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10030f71
cmp dword [ebp - 0xec], 0
je 0x10030f7a
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x10030f4c
xor eax, eax
jmp 0x10030f54
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10030f7a
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10030f7a
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030f24
xor edi, edi
lea eax, [ebp - 0xf4]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031004
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10030ffd
cmp dword [ebp - 0xec], 0
je 0x10031006
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x10030fd8
xor eax, eax
jmp 0x10030fe0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031006
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031006
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10030fb0
xor edi, edi
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x70]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031074
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x1003106d
cmp dword [ebp - 0xec], 0
je 0x10031076
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x10031048
xor eax, eax
jmp 0x10031050
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x10031076
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10031076
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031020
xor edi, edi
lea eax, [ebp - 0xf8]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x2a0]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x100310fb
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100310f4
cmp dword [ebp - 0xec], 0
je 0x100310fd
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x100310cf
xor eax, eax
jmp 0x100310d7
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x100310fd
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x100310fd
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100310a7
xor edi, edi
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0xec], eax
test esi, esi
je 0x10031169
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10031162
cmp dword [ebp - 0xec], 0
je 0x1003116b
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x1003113d
xor eax, eax
jmp 0x10031145
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0xec]
cmp eax, ecx
je 0x1003116b
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1003116b
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10031115
xor edi, edi
lea eax, [ebp - 0xfc]
mov ecx, edi
push eax
call fcn.10009370
mov edx, dword [ebp - 0xf4]
xor eax, eax
mov ecx, dword [ebp - 0xf8]
mov esi, dword [ebp - 0xfc]
nop dword [eax]
test edx, edx
je 0x1003119c
test ecx, ecx
je 0x1003119c
test esi, esi
jne 0x100311a7
inc eax
cmp eax, 0xffffffff
jb 0x10031190
jmp 0x100313da
sub edx, 0x190
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xf4], edx
call fcn.1000c860
push eax
lea ecx, [ebp - 0x88]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
mov edx, dword [ebp - 0xf8]
lea ecx, [ebp - 0xd0]
call fcn.1000c860
push eax
lea ecx, [ebp - 0x70]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0xd0]
call fcn.1000c860
push eax
lea ecx, [ebp - 0x58]
call fcn.100372d0
lea ecx, [ebp - 0xd0]
call fcn.10037280
lea eax, [ebp - 0x88]
mov edx, 0x100637f4
push eax
lea ecx, [ebp - 0xb8]
call fcn.10037c50
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 0x10
lea ecx, [ebp - 0xe8]
mov edx, 0x100637f8
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x70]
push eax
call fcn.10037c50
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x58]
cmp dword [ebp - 0xd4], 0x10
lea edi, [ebp - 0xe8]
push eax
cmovae edi, dword [ebp - 0xe8]
lea ecx, [ebp - 0xa0]
mov edx, 0x10064f08
call fcn.10037c50
add esp, 0xc
push 1
mov byte [ebp - 4], 0x14
lea esi, [ebp - 0xa0]
cmp dword [ebp - 0x8c], 0x10
mov eax, 0x582300
push 1
cmovae esi, dword [ebp - 0xa0]
push 1
push 2
sub esp, 0xc
mov dword [esp + 8], 0x42480000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x1013c9b0]
push 0
call eax
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, al
push str.DUMMY
mov dword [0x100ec940], eax
push 0x10065208
push str.CHAR
push str.VHCL
push dword [0x1012c980]
push 0
push eax
mov eax, 0x581e00
call eax
add esp, 0x60
movzx eax, byte [0x100ec940]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push esi
push edi
push dword [ebp - 0xf0]
push str.DUMMY
push 1
push eax
mov eax, 0x581e00
call eax
movzx eax, byte [0x100ec940]
mov esi, 0x582050
push 0xfa
push 0
push eax
call esi
movzx eax, byte [0x100ec940]
add esp, 0x48
push 0xfa
push 1
push eax
call esi
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0xa0]
add esp, 0xc
mov dword [0x1025b6c8], eax
call fcn.10037280
lea ecx, [ebp - 0xe8]
call fcn.10037280
lea ecx, [ebp - 0xb8]
call fcn.10037280
lea ecx, [ebp - 0x58]
call fcn.10037280
lea ecx, [ebp - 0x70]
call fcn.10037280
lea ecx, [ebp - 0x88]
call fcn.10037280
lea ecx, [ebp - 0x2bc]
call fcn.10009d40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003bfa7
mov esp, ebp
pop ebp
ret
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
int3