Function at 0x10025630
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10058717
mov eax, dword fs:[0]
push eax
sub esp, 0x760
mov eax, dword [0x1006a010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub esp, 8
mov dword [ebp - 0x524], 0
lea ecx, [ebp - 0x76c]
call fcn.10009ae0
mov ecx, str.WantedLevelEditor.xml
mov dword [ebp - 4], 0
call fcn.1003bb90
push eax
lea ecx, [ebp - 0x76c]
call fcn.10009f70
mov dword [0x1006ab3c], eax
test eax, eax
jne 0x1002775d
mov edx, str.MotorBikes
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x1002775d
mov edx, str.none
mov ecx, 0x1006ad80
call fcn.10037de0
test al, al
je 0x100256db
movzx eax, byte [0x100ec940]
push eax
mov eax, 0x580750
call eax
add esp, 4
push 0xa
push str.MotorBikes
mov ecx, 0x1006ad80
call fcn.10037420
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006b1b8]
inc eax
mov dword [ebp - 0x18], 0
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x524], 1
call fcn.10038e60
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x1006359c
cmp eax, 1
jb 0x10025752
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
jmp 0x10025769
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 1
call fcn.10038840
push 0x1006b1a8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 1
push 0x10063598
cmp eax, 1
jb 0x100257b0
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 1]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 1], 0
lea eax, [ebp - 0x28]
jmp 0x100257c7
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 1
call fcn.10038840
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
movups xmm0, xmmword [eax]
mov dword [ebp - 0x524], 3
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x1006af38
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 2
call fcn.10037170
mov ecx, 0x1006b3b8
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x238], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x238]
push eax
movq qword [ebp - 0x228], xmm0
call fcn.100372d0
mov edx, dword [ebp - 0x224]
cmp edx, 0x10
jb 0x10025885
mov ecx, dword [ebp - 0x238]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1002587b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027783
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x100258bd
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100258b3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027788
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
cmp edx, 0x10
jb 0x10025907
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100258fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002778d
push edx
push ecx
call fcn.1003bfed
add esp, 8
cmp dword [0x1006b3cc], 0x10
mov eax, 0x1006b3b8
cmovae eax, dword [0x1006b3b8]
mov dword [0x1013c9b0], eax
mov eax, dword [0x1025c244]
test al, 1
jne 0x10025953
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
mov esi, 0x582029
mov dword [ebp - 0x1c], 4
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 6
cmp byte [ebp - 0x14], 0
je 0x1002599e
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x528]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x528], eax
push dword [ebp - 0x20]
call edi
mov eax, dword [0x1025c244]
test al, 1
jne 0x100259d2
or eax, 1
mov dword [0x1025b6cc], 0x1006353c
mov dword [0x1025c244], eax
mov dword [0x1025b6d4], 0
mov dword [0x1025b6d0], 0
call fcn.1000c4c0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], 4
push eax
push 0x40
mov esi, 0x582432
push 4
push esi
mov dword [ebp - 0x20], esi
call edi
test eax, eax
setne byte [ebp - 0x14]
mov dword [esi], 6
cmp byte [ebp - 0x14], 0
je 0x10025a17
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x528]
push ecx
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x528], eax
push dword [ebp - 0x20]
call edi
push ecx
mov dl, 6
mov ecx, 0x58242b
call fcn.1003b5b0
add esp, 4
mov eax, 0x582300
push 1
push 1
push 1
push 3
sub esp, 0xc
mov dword [esp + 8], 0x435c0000
mov dword [esp + 4], 0x432a0000
mov dword [esp], 0x41e80000
push dword [0x1013c9b0]
push 0
call eax
movzx eax, al
add esp, 0x24
mov dword [0x100ec940], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x524], 0xe
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 9
push str._copbike1
cmp eax, 9
jb 0x10025aeb
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 9]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 9], 0
lea eax, [ebp - 0x28]
jmp 0x10025b02
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 9
call fcn.10038840
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xd0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10025b76
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10025b6c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027792
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x52c], 0x1cf
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x524], 0x36
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 9
push str._copbike2
cmp eax, 9
jb 0x10025c08
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 9]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 9], 0
lea eax, [ebp - 0x28]
jmp 0x10025c1f
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 9
call fcn.10038840
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10025c93
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10025c89
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10027797
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x530], 0x1cf
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x524], 0xd6
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 9
push str._copbike3
cmp eax, 9
jb 0x10025d25
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 9]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 9], 0
lea eax, [ebp - 0x28]
jmp 0x10025d3c
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 9
call fcn.10038840
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10025db0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10025da6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002779c
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x534], 0x1cf
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x524], 0x356
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 9
push str._copbike4
cmp eax, 9
jb 0x10025e42
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 9]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 9], 0
lea eax, [ebp - 0x28]
jmp 0x10025e59
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 9
call fcn.10038840
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x10025ec4
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10025eba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100277a1
push edx
push ecx
call fcn.1003bfed
add esp, 8
mov dword [ebp - 0x538], 0x1cf
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
mov eax, dword [0x1006acb8]
add eax, dword [0x1006aea0]
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x524], 0xd56
call fcn.10038e60
push 0x1006ae90
lea ecx, [ebp - 0x28]
call fcn.10037170
push 0x1006aca8
lea ecx, [ebp - 0x28]
call fcn.10037170
mov edx, dword [ebp - 0x14]
mov eax, edx
mov ecx, dword [ebp - 0x18]
sub eax, ecx
push 9
push str._copbike5
cmp eax, 9
jb 0x10025f56
cmp edx, 0x10
lea esi, [ebp - 0x28]
lea eax, [ecx + 9]
cmovae esi, dword [ebp - 0x28]
add esi, ecx
mov dword [ebp - 0x18], eax
push esi
call fcn.1003ef40
add esp, 0xc
mov byte [esi + 9], 0
lea eax, [ebp - 0x28]
jmp 0x10025f6d
mov byte [ebp - 0x528], 0
lea ecx, [ebp - 0x28]
push dword [ebp - 0x528]
push 9
call fcn.10038840
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x53c], 0x1cf
lea ecx, [ebp - 0x40]
call fcn.10037a80
push str._copbike6
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x148]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x14
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x540], 0x1cf
lea ecx, [ebp - 0x58]
call fcn.10037a80
push str._bikeped1
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x160]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x17
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x544], 0xa5
lea ecx, [ebp - 0x40]
call fcn.10037a80
push str._bikeped2
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x178]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1a
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x548], 0xa5
lea ecx, [ebp - 0x58]
call fcn.10037a80
push str._bikeped3
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x190]
call fcn.10037c00
add esp, 8
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x58]
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x568], 0xa5
lea ecx, [ebp - 0x40]
call fcn.10037a80
push str._bikeped4
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1a8]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x20
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x564], 0xa5
lea ecx, [ebp - 0x58]
call fcn.10037a80
push str._bikeped5
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x1c0]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x23
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x56c], 0xa5
lea ecx, [ebp - 0x40]
call fcn.10037a80
push str._bikeped6
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1d8]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x26
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x560], 0xa5
lea ecx, [ebp - 0x58]
call fcn.10037a80
push str._bike_occupants_1
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1f0]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x29
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x55c], 1
lea ecx, [ebp - 0x40]
call fcn.10037a80
push str._bike_occupants_2
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x208]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x558], 1
lea ecx, [ebp - 0x58]
call fcn.10037a80
push str._bike_occupants_3
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x220]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2f
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x554], 1
lea ecx, [ebp - 0x40]
call fcn.10037a80
push str._bike_occupants_4
mov edx, eax
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x130]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x32
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x550], 1
lea ecx, [ebp - 0x58]
call fcn.10037a80
push str._bike_occupants_5
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x118]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x35
call fcn.10037280
push 0x1006aca8
mov edx, 0x1006ae90
mov dword [ebp - 0x54c], 1
lea ecx, [ebp - 0x250]
call fcn.10037a80
push str._bike_occupants_6
mov edx, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x100]
call fcn.10037c00
add esp, 8
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x38
call fcn.10037280
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov edi, dword [ebp - 0x750]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x570], 1
mov dword [ebp - 0x524], eax
test edi, edi
je 0x10026389
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax]
call eax
mov esi, eax
test esi, esi
je 0x10026382
cmp dword [ebp - 0x524], 0
je 0x1002638b
mov edx, dword [esi]
mov ecx, esi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002635d
xor eax, eax
jmp 0x10026365
lea ecx, [esi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x1002638b
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002638b
mov edi, dword [edi + 0x28]
test edi, edi
jne 0x10026335
xor esi, esi
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
mov esi, dword [esi + 0x1c]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x10026404
nop dword [eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100263fd
cmp dword [ebp - 0x524], 0
je 0x10026406
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x100263d8
xor eax, eax
jmp 0x100263e0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x10026406
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10026406
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100263b0
xor edi, edi
lea eax, [ebp - 0x52c]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x1002648b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10026484
cmp dword [ebp - 0x524], 0
je 0x1002648d
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002645f
xor eax, eax
jmp 0x10026467
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x1002648d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002648d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026437
xor edi, edi
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x10026504
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100264fd
cmp dword [ebp - 0x524], 0
je 0x10026506
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x100264d8
xor eax, eax
jmp 0x100264e0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x10026506
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10026506
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100264b0
xor edi, edi
lea eax, [ebp - 0x530]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x1002658b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10026584
cmp dword [ebp - 0x524], 0
je 0x1002658d
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002655f
xor eax, eax
jmp 0x10026567
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x1002658d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002658d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026537
xor edi, edi
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x10026604
nop
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100265fd
cmp dword [ebp - 0x524], 0
je 0x10026606
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x100265d8
xor eax, eax
jmp 0x100265e0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x10026606
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10026606
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100265b0
xor edi, edi
lea eax, [ebp - 0x534]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov eax, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae eax, dword [0x1006b0a0]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x1002668b
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x10026684
cmp dword [ebp - 0x524], 0
je 0x1002668d
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x18]
call edx
test eax, eax
je 0x1002665f
xor eax, eax
jmp 0x10026667
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x1002668d
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x1002668d
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026637
xor edi, edi
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov esi, dword [edi + 0x1c]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x524], eax
test esi, esi
je 0x10026704
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, esi
mov eax, dword [eax]
call eax
mov edi, eax
test edi, edi
je 0x100266fd
cmp dword [ebp - 0x524], 0
je 0x10026706
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x18]
call eax
test eax, eax
je 0x100266d8
xor eax, eax
jmp 0x100266e0
lea ecx, [edi + 0xc]
call fcn.10007e00
mov ecx, dword [ebp - 0x524]
cmp eax, ecx
je 0x10026706
push 0x7fffffff
push ecx
push eax
call fcn.10043530
add esp, 0xc
test eax, eax
je 0x10026706
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100266b0
xor edi, edi
lea eax, [ebp - 0x538]
mov ecx, edi
push eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026744
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026746
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026731
xor eax, eax
cmp dword [ebp - 0xd4], 0x10
lea edi, [ebp - 0xe8]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0xe8]
test esi, esi
je 0x10026774
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026776
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026761
xor eax, eax
lea ecx, [ebp - 0x53c]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x100267b4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x100267b6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100267a1
xor eax, eax
cmp dword [ebp - 0x134], 0x10
lea edi, [ebp - 0x148]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x148]
test esi, esi
je 0x100267e4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x100267e6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100267d1
xor eax, eax
lea ecx, [ebp - 0x540]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026824
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026826
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026811
xor eax, eax
cmp dword [ebp - 0x14c], 0x10
lea edi, [ebp - 0x160]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x160]
test esi, esi
je 0x10026854
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026856
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026841
xor eax, eax
lea ecx, [ebp - 0x544]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026894
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026896
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026881
xor eax, eax
cmp dword [ebp - 0x164], 0x10
lea edi, [ebp - 0x178]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x178]
test esi, esi
je 0x100268c4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x100268c6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100268b1
xor eax, eax
lea ecx, [ebp - 0x548]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026904
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026906
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100268f1
xor eax, eax
cmp dword [ebp - 0x17c], 0x10
lea edi, [ebp - 0x190]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x190]
test esi, esi
je 0x10026934
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026936
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026921
xor eax, eax
lea ecx, [ebp - 0x568]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026974
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026976
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026961
xor eax, eax
cmp dword [ebp - 0x194], 0x10
lea edi, [ebp - 0x1a8]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x1a8]
test esi, esi
je 0x100269a4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x100269a6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026991
xor eax, eax
lea ecx, [ebp - 0x564]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x100269e4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x100269e6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100269d1
xor eax, eax
cmp dword [ebp - 0x1ac], 0x10
lea edi, [ebp - 0x1c0]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x1c0]
test esi, esi
je 0x10026a14
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026a16
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026a01
xor eax, eax
lea ecx, [ebp - 0x56c]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026a54
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026a56
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026a41
xor eax, eax
cmp dword [ebp - 0x1c4], 0x10
lea edi, [ebp - 0x1d8]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x1d8]
test esi, esi
je 0x10026a84
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026a86
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026a71
xor eax, eax
lea ecx, [ebp - 0x560]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026ac4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026ac6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026ab1
xor eax, eax
cmp dword [ebp - 0x1dc], 0x10
lea edi, [ebp - 0x1f0]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x1f0]
test esi, esi
je 0x10026af4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026af6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026ae1
xor eax, eax
lea ecx, [ebp - 0x55c]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026b34
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026b36
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026b21
xor eax, eax
cmp dword [ebp - 0x1f4], 0x10
lea edi, [ebp - 0x208]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x208]
test esi, esi
je 0x10026b64
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026b66
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026b51
xor eax, eax
lea ecx, [ebp - 0x558]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026ba4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026ba6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026b91
xor eax, eax
cmp dword [ebp - 0x20c], 0x10
lea edi, [ebp - 0x220]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x220]
test esi, esi
je 0x10026bd4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026bd6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026bc1
xor eax, eax
lea ecx, [ebp - 0x554]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026c14
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026c16
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026c01
xor eax, eax
cmp dword [ebp - 0x11c], 0x10
lea edi, [ebp - 0x130]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x130]
test esi, esi
je 0x10026c44
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026c46
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026c31
xor eax, eax
lea ecx, [ebp - 0x550]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026c84
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026c86
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026c71
xor eax, eax
cmp dword [ebp - 0x104], 0x10
lea edi, [ebp - 0x118]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x118]
test esi, esi
je 0x10026cb4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026cb6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026ca1
xor eax, eax
lea ecx, [ebp - 0x54c]
push ecx
mov ecx, eax
call fcn.10009370
cmp dword [0x1006b0b4], 0x10
mov edi, 0x1006b0a0
mov esi, dword [ebp - 0x750]
cmovae edi, dword [0x1006b0a0]
test esi, esi
je 0x10026cf4
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026cf6
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026ce1
xor eax, eax
cmp dword [ebp - 0xec], 0x10
lea edi, [ebp - 0x100]
mov esi, dword [eax + 0x1c]
cmovae edi, dword [ebp - 0x100]
test esi, esi
je 0x10026d24
push edi
mov ecx, esi
call fcn.10008b30
test eax, eax
jne 0x10026d26
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10026d11
xor eax, eax
lea ecx, [ebp - 0x570]
push ecx
mov ecx, eax
call fcn.10009370
mov edx, dword [ebp - 0x52c]
lea ecx, [ebp - 0x40]
sub edx, 0x190
mov dword [ebp - 0x52c], edx
call fcn.1000c860
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x58]
mov edx, dword [ebp - 0x530]
sub edx, 0x190
mov dword [ebp - 0x530], edx
call fcn.1000c860
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x250]
mov edx, dword [ebp - 0x534]
sub edx, 0x190
mov dword [ebp - 0x534], edx
call fcn.1000c860
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x280]
mov edx, dword [ebp - 0x538]
sub edx, 0x190
mov dword [ebp - 0x538], edx
call fcn.1000c860
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x298]
mov edx, dword [ebp - 0x53c]
sub edx, 0x190
mov dword [ebp - 0x53c], edx
call fcn.1000c860
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2b0]
mov edx, dword [ebp - 0x540]
sub edx, 0x190
mov dword [ebp - 0x540], edx
call fcn.1000c860
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x2c8]
mov edx, dword [ebp - 0x544]
call fcn.1000c860
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x2e0]
mov edx, dword [ebp - 0x548]
call fcn.1000c860
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x370]
mov edx, dword [ebp - 0x568]
call fcn.1000c860
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x2f8]
mov edx, dword [ebp - 0x564]
call fcn.1000c860
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x310]
mov edx, dword [ebp - 0x56c]
call fcn.1000c860
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x328]
mov edx, dword [ebp - 0x560]
call fcn.1000c860
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x340]
mov edx, dword [ebp - 0x55c]
call fcn.1000c860
mov byte [ebp - 4], 0x45
mov edx, dword [ebp - 0x558]
lea ecx, [ebp - 0x358]
call fcn.1000c860
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x268]
mov edx, dword [ebp - 0x554]
call fcn.1000c860
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x28]
mov edx, dword [ebp - 0x550]
call fcn.1000c860
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x70]
mov edx, dword [ebp - 0x54c]
call fcn.1000c860
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x238]
mov edx, dword [ebp - 0x570]
call fcn.1000c860
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x4a
push eax
mov edx, 0x100637f4
lea ecx, [ebp - 0x478]
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0xd0]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x478]
call fcn.10037280
cmp dword [ebp - 0xbc], 0x10
lea eax, [ebp - 0xd0]
mov edx, 0x100637f4
lea ecx, [ebp - 0x490]
cmovae eax, dword [ebp - 0xd0]
mov dword [ebp - 0x598], eax
lea eax, [ebp - 0x58]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x490]
call fcn.10037280
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
mov edx, 0x100637f4
lea ecx, [ebp - 0x4a8]
cmovae eax, dword [ebp - 0xb8]
mov dword [ebp - 0x59c], eax
lea eax, [ebp - 0x250]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0xa0]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x4a8]
call fcn.10037280
cmp dword [ebp - 0x8c], 0x10
lea eax, [ebp - 0xa0]
mov edx, 0x100637f4
lea ecx, [ebp - 0x4c0]
cmovae eax, dword [ebp - 0xa0]
mov dword [ebp - 0x5a0], eax
lea eax, [ebp - 0x280]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x88]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x4c0]
call fcn.10037280
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov edx, 0x100637f4
lea ecx, [ebp - 0x4d8]
cmovae eax, dword [ebp - 0x88]
mov dword [ebp - 0x5a4], eax
lea eax, [ebp - 0x298]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0xe8]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x4d8]
call fcn.10037280
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
mov edx, 0x100637f4
lea ecx, [ebp - 0x4f0]
cmovae eax, dword [ebp - 0xe8]
mov dword [ebp - 0x524], eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x148]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x4f0]
call fcn.10037280
cmp dword [ebp - 0x134], 0x10
lea eax, [ebp - 0x148]
mov edx, 0x100637f8
lea ecx, [ebp - 0x508]
cmovae eax, dword [ebp - 0x148]
mov dword [ebp - 0x528], eax
lea eax, [ebp - 0x2c8]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x160]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x508]
call fcn.10037280
cmp dword [ebp - 0x14c], 0x10
lea eax, [ebp - 0x160]
mov edx, 0x100637f8
lea ecx, [ebp - 0x460]
cmovae eax, dword [ebp - 0x160]
mov dword [ebp - 0x578], eax
lea eax, [ebp - 0x2e0]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x178]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x460]
call fcn.10037280
cmp dword [ebp - 0x164], 0x10
lea eax, [ebp - 0x178]
mov edx, 0x100637f8
lea ecx, [ebp - 0x520]
cmovae eax, dword [ebp - 0x178]
mov dword [ebp - 0x57c], eax
lea eax, [ebp - 0x370]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x190]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x520]
call fcn.10037280
cmp dword [ebp - 0x17c], 0x10
lea eax, [ebp - 0x190]
cmovae eax, dword [ebp - 0x190]
mov dword [ebp - 0x580], eax
lea eax, [ebp - 0x2f8]
push eax
mov edx, 0x100637f8
lea ecx, [ebp - 0x388]
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x1a8]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x388]
call fcn.10037280
cmp dword [ebp - 0x194], 0x10
lea eax, [ebp - 0x1a8]
mov edx, 0x100637f8
lea ecx, [ebp - 0x3a0]
cmovae eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x588], eax
lea eax, [ebp - 0x310]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x1c0]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x3a0]
call fcn.10037280
cmp dword [ebp - 0x1ac], 0x10
lea eax, [ebp - 0x1c0]
mov edx, 0x100637f8
lea ecx, [ebp - 0x3b8]
cmovae eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x58c], eax
lea eax, [ebp - 0x328]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x1d8]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x3b8]
call fcn.10037280
cmp dword [ebp - 0x1c4], 0x10
lea eax, [ebp - 0x1d8]
mov edx, 0x10064f08
lea ecx, [ebp - 0x3d0]
cmovae eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x590], eax
lea eax, [ebp - 0x340]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x1f0]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x3d0]
call fcn.10037280
cmp dword [ebp - 0x1dc], 0x10
lea eax, [ebp - 0x1f0]
mov edx, 0x10064f08
lea ecx, [ebp - 0x3e8]
cmovae eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x594], eax
lea eax, [ebp - 0x358]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x208]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x3e8]
call fcn.10037280
cmp dword [ebp - 0x1f4], 0x10
lea eax, [ebp - 0x208]
mov edx, 0x10064f08
lea ecx, [ebp - 0x400]
cmovae eax, dword [ebp - 0x208]
mov dword [ebp - 0x584], eax
lea eax, [ebp - 0x268]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x220]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x400]
call fcn.10037280
cmp dword [ebp - 0x20c], 0x10
lea eax, [ebp - 0x220]
mov edx, 0x10064f08
lea ecx, [ebp - 0x418]
cmovae eax, dword [ebp - 0x220]
mov dword [ebp - 0x5a8], eax
lea eax, [ebp - 0x28]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x418]
call fcn.10037280
cmp dword [ebp - 0x11c], 0x10
lea eax, [ebp - 0x130]
mov edx, 0x10064f08
lea ecx, [ebp - 0x430]
cmovae eax, dword [ebp - 0x130]
mov dword [ebp - 0x5ac], eax
lea eax, [ebp - 0x70]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x118]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x430]
call fcn.10037280
cmp dword [ebp - 0x104], 0x10
lea eax, [ebp - 0x118]
mov edx, 0x10064f08
lea ecx, [ebp - 0x448]
cmovae eax, dword [ebp - 0x118]
mov dword [ebp - 0x574], eax
lea eax, [ebp - 0x238]
push eax
call fcn.10037c50
add esp, 4
lea ecx, [ebp - 0x100]
push eax
call fcn.100372d0
lea ecx, [ebp - 0x448]
call fcn.10037280
cmp dword [ebp - 0xec], 0x10
lea edi, [ebp - 0x100]
mov ecx, 0xc9bee4
cmovae edi, dword [ebp - 0x100]
call fcn.1003b890
mov ecx, 0xc9bee8
mov word [0x1023ca64], ax
call fcn.1003b890
mov ax, word [0x1023ca64]
mov ecx, 0xc9bee4
shr ax, 1
mov word [0x1009c908], ax
call fcn.1003b890
mov ecx, 0xc9bee8
mov word [0x1023ca64], ax
call fcn.1003b890
movzx esi, word [0x1023ca64]
mov eax, 0x66666667
mov ecx, esi
shr ecx, 1
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov word [0x1009c908], ax
mov eax, 0xcccccccd
mul esi
shr edx, 2
movzx eax, dx
push eax
mov word [0x1017ca00], dx
push 0
movzx eax, byte [0x100ec940]
mov esi, 0x582050
push eax
call esi
movzx eax, word [0x1017ca00]
push eax
movzx eax, byte [0x100ec940]
push 1
push eax
call esi
movzx eax, word [0x1017ca00]
push eax
movzx eax, byte [0x100ec940]
push 2
push eax
call esi
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x100ec940]
mov esi, 0x581e00
push str.DUMMY
push dword [ebp - 0x528]
push dword [ebp - 0x524]
push dword [ebp - 0x5a4]
push dword [ebp - 0x5a0]
push dword [ebp - 0x59c]
push dword [ebp - 0x598]
push str.BIKES_
push 0
push eax
call esi
add esp, 0x60
movzx eax, byte [0x100ec940]
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
push dword [ebp - 0x590]
push dword [ebp - 0x58c]
push dword [ebp - 0x588]
push dword [ebp - 0x580]
push dword [ebp - 0x57c]
push dword [ebp - 0x578]
push str.BIKED
push 1
push eax
call esi
push str.DUMMY
push str.DUMMY
push str.DUMMY
push str.DUMMY
movzx eax, byte [0x100ec940]
push str.DUMMY
push str.DUMMY
push edi
push dword [ebp - 0x574]
push dword [ebp - 0x5ac]
push dword [ebp - 0x5a8]
push dword [ebp - 0x584]
push dword [ebp - 0x594]
push str.BIKEOC
push 2
push eax
call esi
mov eax, dword [0xb7cb84]
lea ecx, [ebp - 0x238]
add esp, 0x78
mov dword [0x1025b6c8], eax
mov byte [0x1006c842], 0xff
call fcn.10037280
lea ecx, [ebp - 0x70]
call fcn.10037280
lea ecx, [ebp - 0x28]
call fcn.10037280
lea ecx, [ebp - 0x268]
call fcn.10037280
lea ecx, [ebp - 0x358]
call fcn.10037280
lea ecx, [ebp - 0x340]
call fcn.10037280
lea ecx, [ebp - 0x328]
call fcn.10037280
lea ecx, [ebp - 0x310]
call fcn.10037280
lea ecx, [ebp - 0x2f8]
call fcn.10037280
lea ecx, [ebp - 0x370]
call fcn.10037280
lea ecx, [ebp - 0x2e0]
call fcn.10037280
lea ecx, [ebp - 0x2c8]
call fcn.10037280
lea ecx, [ebp - 0x2b0]
call fcn.10037280
lea ecx, [ebp - 0x298]
call fcn.10037280
lea ecx, [ebp - 0x280]
call fcn.10037280
lea ecx, [ebp - 0x250]
call fcn.10037280
lea ecx, [ebp - 0x58]
call fcn.10037280
lea ecx, [ebp - 0x40]
call fcn.10037280
lea ecx, [ebp - 0x100]
call fcn.10037280
lea ecx, [ebp - 0x118]
call fcn.10037280
lea ecx, [ebp - 0x130]
call fcn.10037280
lea ecx, [ebp - 0x220]
call fcn.10037280
lea ecx, [ebp - 0x208]
call fcn.10037280
lea ecx, [ebp - 0x1f0]
call fcn.10037280
lea ecx, [ebp - 0x1d8]
call fcn.10037280
lea ecx, [ebp - 0x1c0]
call fcn.10037280
lea ecx, [ebp - 0x1a8]
call fcn.10037280
lea ecx, [ebp - 0x190]
call fcn.10037280
lea ecx, [ebp - 0x178]
call fcn.10037280
lea ecx, [ebp - 0x160]
call fcn.10037280
lea ecx, [ebp - 0x148]
call fcn.10037280
lea ecx, [ebp - 0xe8]
call fcn.10037280
lea ecx, [ebp - 0x88]
call fcn.10037280
lea ecx, [ebp - 0xa0]
call fcn.10037280
lea ecx, [ebp - 0xb8]
call fcn.10037280
lea ecx, [ebp - 0xd0]
call fcn.10037280
lea ecx, [ebp - 0x76c]
call fcn.10009d40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003bfa7
mov esp, ebp
pop ebp
ret
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
call fcn.1004910a
int3