Function at 0x1009d560
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x100fa040]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x102c7484], 1
push ebx
push esi
push edi
mov edi, ecx
jne 0x100a0503
cmp dword [0x107e1c38], 1
jne 0x100a0503
push str.Resolution
lea ecx, [ebp - 0x1c]
call fcn.100a0570
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0
push eax
push 0xf003f
push 0
push str.SoftwareWebzenMuConfig
push reloc.DSOUND.dll_DirectSoundCreate
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x20], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x1009d5dc
or esi, 0xffffffff
jmp 0x1009d61a
cmp dword [ebp - 8], 0xf
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
lea eax, [ebp - 0x1c]
cmova eax, dword [ebp - 0x1c]
push 0
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x24]
test eax, eax
je 0x1009d611
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
or esi, 0xffffffff
jmp 0x1009d61a
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 8]
cmp ecx, 0xf
jbe 0x1009d64e
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1009d644
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a0514
push ecx
push edx
call fcn.100c0f11
add esp, 8
mov byte [edi + 0x25b8], 0
cmp esi, 4
jl 0x100a0503
push 0x1009d530
push 0x636420
push 0xe9
mov byte [edi + 0x25b8], 1
call fcn.100bed50
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x20]
add esp, 0xc
push eax
push 0x40
push 4
push 0x4833df
call edi
lea eax, [ebp - 0x20]
mov dword [0x4833df], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4833df
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d717e
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d717e], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d717e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7a13
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d7a13], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7a13
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d83f9
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d83f9], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d83f9
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x78aef1
call edi
lea eax, [ebp - 0x20]
mov dword [0x78aef1], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x78aef1
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x78af61
call edi
lea eax, [ebp - 0x20]
mov dword [0x78af61], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x78af61
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x78afc2
call edi
lea eax, [ebp - 0x20]
mov dword [0x78afc2], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x78afc2
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x78afe8
call edi
lea eax, [ebp - 0x20]
mov dword [0x78afe8], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x78afe8
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x82b76a
call edi
lea eax, [ebp - 0x20]
mov dword [0x82b76a], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x82b76a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x84c517
call edi
lea eax, [ebp - 0x20]
mov dword [0x84c517], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x84c517
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c8e4
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c8e4], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x85c8e4
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x944cd4
call edi
lea eax, [ebp - 0x20]
mov dword [0x944cd4], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x944cd4
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x40f7b8
call edi
lea eax, [ebp - 0x20]
mov dword [0x40f7b8], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x40f7b8
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48842a
call edi
lea eax, [ebp - 0x20]
mov dword [0x48842a], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48842a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48846a
call edi
lea eax, [ebp - 0x20]
mov dword [0x48846a], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48846a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48bc83
call edi
lea eax, [ebp - 0x20]
mov dword [0x48bc83], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48bc83
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48bc8d
call edi
lea eax, [ebp - 0x20]
mov dword [0x48bc8d], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48bc8d
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48bdce
call edi
lea eax, [ebp - 0x20]
mov dword [0x48bdce], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48bdce
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48bdd8
call edi
lea eax, [ebp - 0x20]
mov dword [0x48bdd8], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48bdd8
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48d9bc
call edi
lea eax, [ebp - 0x20]
mov dword [0x48d9bc], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48d9bc
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x48d9c9
call edi
lea eax, [ebp - 0x20]
mov dword [0x48d9c9], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x48d9c9
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d06fa
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d06fa], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d06fa
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d0706
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d0706], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d0706
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d13ea
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d13ea], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d13ea
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d27ab
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d27ab], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d27ab
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7d71
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d7d71], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7d71
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7d8d
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d7d8d], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7d8d
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7e06
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d7e06], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7e06
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7e8c
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d7e8c], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7e8c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7d9a
call edi
lea eax, [ebp - 0x20]
mov dword [0x4d7d9a], 0x1a6
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7d9a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4d7e1e
call edi
mov dword [0x4d7e1e], 0x1a6
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 4
push 0x4d7e1e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x598ccf
call edi
lea eax, [ebp - 0x20]
mov dword [0x598ccf], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x598ccf
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5a3e3a
call edi
lea eax, [ebp - 0x20]
mov dword [0x5a3e3a], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x5a3e3a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5a3e72
call edi
lea eax, [ebp - 0x20]
mov dword [0x5a3e72], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x5a3e72
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c72c9
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c72c9], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x5c72c9
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x6359c3
call edi
lea eax, [ebp - 0x20]
mov dword [0x6359c3], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x6359c3
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x635b5c
call edi
lea eax, [ebp - 0x20]
mov dword [0x635b5c], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x635b5c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x636493
call edi
lea eax, [ebp - 0x20]
mov dword [0x636493], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x636493
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x6364bf
call edi
lea eax, [ebp - 0x20]
mov dword [0x6364bf], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x6364bf
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x64c3cd
call edi
lea eax, [ebp - 0x20]
mov dword [0x64c3cd], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x64c3cd
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x64c3ff
call edi
lea eax, [ebp - 0x20]
mov dword [0x64c3ff], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x64c3ff
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x64c3c7
call edi
lea eax, [ebp - 0x20]
mov dword [0x64c3c7], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x64c3c7
call edi
push 0x64c40c
push 0x64c3c0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x779cd0
call edi
lea eax, [ebp - 0x20]
mov dword [0x779cd0], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x779cd0
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x779cdb
call edi
lea eax, [ebp - 0x20]
mov dword [0x779cdb], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x779cdb
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x830d49
call edi
lea eax, [ebp - 0x20]
mov dword [0x830d49], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x830d49
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x865ec1
call edi
lea eax, [ebp - 0x20]
mov dword [0x865ec1], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x865ec1
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x865eed
call edi
lea eax, [ebp - 0x20]
mov dword [0x865eed], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x865eed
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x943a53
call edi
lea eax, [ebp - 0x20]
mov dword [0x943a53], 0x6b
push eax
push dword [ebp - 0x20]
push 4
push 0x943a53
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x943a5a
call edi
lea eax, [ebp - 0x20]
mov dword [0x943a5a], 0x280
push eax
push dword [ebp - 0x20]
push 4
push 0x943a5a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5d3d77
call edi
lea eax, [ebp - 0x20]
mov dword [0x5d3d77], 0x356
push eax
push dword [ebp - 0x20]
push 4
push 0x5d3d77
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5d3f87
call edi
lea eax, [ebp - 0x20]
mov dword [0x5d3f87], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x5d3f87
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5d1d7e
call edi
lea eax, [ebp - 0x20]
mov dword [0x5d1d7e], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x5d1d7e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4f31b6
call edi
lea eax, [ebp - 0x20]
mov dword [0x4f31b6], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x4f31b6
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c7284
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c7284], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x5c7284
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c72c0
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c72c0], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x5c72c0
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a6a9
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a6a9], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85a6a9
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a8af
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a8af], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85a8af
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a92e
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a92e], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85a92e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a9ad
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a9ad], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85a9ad
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85aa2c
call edi
lea eax, [ebp - 0x20]
mov dword [0x85aa2c], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85aa2c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ab42
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ab42], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85ab42
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85abd0
call edi
lea eax, [ebp - 0x20]
mov dword [0x85abd0], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85abd0
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ad79
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ad79], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85ad79
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ae07
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ae07], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85ae07
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ae95
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ae95], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85ae95
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85afb1
call edi
lea eax, [ebp - 0x20]
mov dword [0x85afb1], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85afb1
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b049
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b049], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85b049
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b0d7
call edi
mov dword [0x85b0d7], 0x298
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 4
push 0x85b0d7
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b4da
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b4da], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85b4da
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b56e
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b56e], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85b56e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c021
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c021], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c021
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c0b5
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c0b5], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c0b5
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c271
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c271], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c271
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c4c1
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c4c1], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c4c1
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c5f3
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c5f3], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c5f3
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c687
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c687], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c687
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c71b
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c71b], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c71b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c7af
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c7af], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c7af
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c978
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c978], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85c978
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85cc37
call edi
lea eax, [ebp - 0x20]
mov dword [0x85cc37], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85cc37
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85f78c
call edi
lea eax, [ebp - 0x20]
mov dword [0x85f78c], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85f78c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85f87b
call edi
lea eax, [ebp - 0x20]
mov dword [0x85f87b], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85f87b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85fa1b
call edi
lea eax, [ebp - 0x20]
mov dword [0x85fa1b], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85fa1b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85fa46
call edi
lea eax, [ebp - 0x20]
mov dword [0x85fa46], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85fa46
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85fa8c
call edi
lea eax, [ebp - 0x20]
mov dword [0x85fa8c], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85fa8c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85fd26
call edi
lea eax, [ebp - 0x20]
mov dword [0x85fd26], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85fd26
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85fe8e
call edi
lea eax, [ebp - 0x20]
mov dword [0x85fe8e], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x85fe8e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x860034
call edi
lea eax, [ebp - 0x20]
mov dword [0x860034], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x860034
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a732
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a732], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85a732
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a7b1
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a7b1], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85a7b1
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a830
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a830], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85a830
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85aab4
call edi
lea eax, [ebp - 0x20]
mov dword [0x85aab4], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85aab4
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ac60
call edi
mov dword [0x85ac60], 0x1da
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 4
push 0x85ac60
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85aceb
call edi
lea eax, [ebp - 0x20]
mov dword [0x85aceb], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85aceb
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b1f6
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b1f6], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85b1f6
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c149
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c149], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85c149
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c1dd
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c1dd], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85c1dd
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ca16
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ca16], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85ca16
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85caaa
call edi
lea eax, [ebp - 0x20]
mov dword [0x85caaa], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85caaa
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85cb3e
call edi
lea eax, [ebp - 0x20]
mov dword [0x85cb3e], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85cb3e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85cccb
call edi
lea eax, [ebp - 0x20]
mov dword [0x85cccb], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85cccb
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85a110
call edi
lea eax, [ebp - 0x20]
mov dword [0x85a110], 0x14c
push eax
push dword [ebp - 0x20]
push 4
push 0x85a110
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c6f68
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c6f68], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x5c6f68
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c6fb3
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c6fb3], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x5c6fb3
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c6fe9
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c6fe9], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x5c6fe9
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c700a
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c700a], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x5c700a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c72b7
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c72b7], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x5c72b7
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c7307
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c7307], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x5c7307
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c72fe
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c72fe], 0x11c
push eax
push dword [ebp - 0x20]
push 4
push 0x5c72fe
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x5c7325
call edi
lea eax, [ebp - 0x20]
mov dword [0x5c7325], 0x11c
push eax
push dword [ebp - 0x20]
push 4
push 0x5c7325
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85af23
call edi
lea eax, [ebp - 0x20]
mov dword [0x85af23], 0x307
push eax
push dword [ebp - 0x20]
push 4
push 0x85af23
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b168
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b168], 0x2d7
push eax
push dword [ebp - 0x20]
push 4
push 0x85b168
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b287
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b287], 0x1a3
push eax
push dword [ebp - 0x20]
push 4
push 0x85b287
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b31b
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b31b], 0x2f3
push eax
push dword [ebp - 0x20]
push 4
push 0x85b31b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b3b2
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b3b2], 0x2d7
push eax
push dword [ebp - 0x20]
push 4
push 0x85b3b2
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b446
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b446], 0x2d3
push eax
push dword [ebp - 0x20]
push 4
push 0x85b446
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b602
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b602], 0x2e6
push eax
push dword [ebp - 0x20]
push 4
push 0x85b602
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85b9f0
call edi
lea eax, [ebp - 0x20]
mov dword [0x85b9f0], 0x2d3
push eax
push dword [ebp - 0x20]
push 4
push 0x85b9f0
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85bb12
call edi
lea eax, [ebp - 0x20]
mov dword [0x85bb12], 0x2bc
push eax
push dword [ebp - 0x20]
push 4
push 0x85bb12
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85bc31
call edi
lea eax, [ebp - 0x20]
mov dword [0x85bc31], 0x147
push eax
push dword [ebp - 0x20]
push 4
push 0x85bc31
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85bcc5
call edi
lea eax, [ebp - 0x20]
mov dword [0x85bcc5], 0x138
push eax
push dword [ebp - 0x20]
push 4
push 0x85bcc5
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push 0x85bd59
call edi
lea eax, [ebp - 0x20]
mov byte [0x85bd59], 0x6b
push eax
push dword [ebp - 0x20]
push 1
push 0x85bd59
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85bdea
call edi
lea eax, [ebp - 0x20]
mov dword [0x85bdea], 0x138
push eax
push dword [ebp - 0x20]
push 4
push 0x85bdea
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push 0x85be7b
call edi
lea eax, [ebp - 0x20]
mov byte [0x85be7b], 0x6b
push eax
push dword [ebp - 0x20]
push 1
push 0x85be7b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push 0x85bf90
call edi
lea eax, [ebp - 0x20]
mov byte [0x85bf90], 0x6b
push eax
push dword [ebp - 0x20]
push 1
push 0x85bf90
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c39c
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c39c], 0x31d
push eax
push dword [ebp - 0x20]
push 4
push 0x85c39c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c55f
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c55f], 0x273
push eax
push dword [ebp - 0x20]
push 4
push 0x85c55f
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85c84d
call edi
lea eax, [ebp - 0x20]
mov dword [0x85c84d], 0x2d1
push eax
push dword [ebp - 0x20]
push 4
push 0x85c84d
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85eca7
call edi
lea eax, [ebp - 0x20]
mov dword [0x85eca7], 0x1f1
push eax
push dword [ebp - 0x20]
push 4
push 0x85eca7
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ed5a
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ed5a], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85ed5a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85edf8
call edi
lea eax, [ebp - 0x20]
mov dword [0x85edf8], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85edf8
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85ee7f
call edi
lea eax, [ebp - 0x20]
mov dword [0x85ee7f], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85ee7f
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85eeac
call edi
lea eax, [ebp - 0x20]
mov dword [0x85eeac], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85eeac
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85f0f2
call edi
lea eax, [ebp - 0x20]
mov dword [0x85f0f2], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85f0f2
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x85f7b7
call edi
lea eax, [ebp - 0x20]
mov dword [0x85f7b7], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x85f7b7
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5954
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5954], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5954
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5998
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5998], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5998
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d59bc
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d59bc], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d59bc
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5a01
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5a01], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5a01
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5a25
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5a25], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5a25
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5a6a
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5a6a], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5a6a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5a8e
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5a8e], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5a8e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5ad2
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5ad2], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5ad2
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5af6
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5af6], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5af6
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5b3b
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5b3b], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5b3b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5b5f
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5b5f], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5b5f
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5ba4
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5ba4], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5ba4
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5bca
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5bca], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5bca
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5c0e
call edi
mov dword [0x7d5c0e], 0x1da
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5c0e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5c5b
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5c5b], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5c5b
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5c8a
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5c8a], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5c8a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7d5cb6
call edi
lea eax, [ebp - 0x20]
mov dword [0x7d5cb6], 0x1da
push eax
push dword [ebp - 0x20]
push 4
push 0x7d5cb6
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x872632
call edi
lea eax, [ebp - 0x20]
mov dword [0x872632], 0x1ab
push eax
push dword [ebp - 0x20]
push 4
push 0x872632
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x8737e2
call edi
lea eax, [ebp - 0x20]
mov dword [0x8737e2], 0x1ab
push eax
push dword [ebp - 0x20]
push 4
push 0x8737e2
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4e7a4d
call edi
lea eax, [ebp - 0x20]
mov dword [0x4e7a4d], 0x1ab
push eax
push dword [ebp - 0x20]
push 4
push 0x4e7a4d
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7f827a
call edi
lea eax, [ebp - 0x20]
mov dword [0x7f827a], 0x298
push eax
push dword [ebp - 0x20]
push 4
push 0x7f827a
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4210a3
call edi
lea eax, [ebp - 0x20]
mov dword [0x4210a3], 0x197
push eax
push dword [ebp - 0x20]
push 4
push 0x4210a3
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x59792e
call edi
lea eax, [ebp - 0x20]
mov dword [0x59792e], 0x1ab
push eax
push dword [ebp - 0x20]
push 4
push 0x59792e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x59795a
call edi
lea eax, [ebp - 0x20]
mov dword [0x59795a], 0x1ab
push eax
push dword [ebp - 0x20]
push 4
push 0x59795a
call edi
lea eax, [ebp - 0x20]
mov dword [0x81c04bc], 0x298
push eax
push 0x40
push 8
push 0xd23ab8
call edi
movsd xmm0, qword [0x100f1c78]
lea eax, [ebp - 0x20]
push eax
movsd qword [0xd23ab8], xmm0
push dword [ebp - 0x20]
push 8
push 0xd23ab8
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0xd461e8
call edi
lea eax, [ebp - 0x20]
mov dword [0xd461e8], 0x442b8000
push eax
push dword [ebp - 0x20]
push 4
push 0xd461e8
call edi
push 0x100715f0
push 0x40f2e9
push 0xe8
mov dword [0x107e7b70], 0x6b
mov dword [0x107e7b78], 0xd6
mov dword [0x100fac74], 0x356
call fcn.100bed50
add esp, 0xc
push 0x100715f0
push 0x48007c
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100715f0
push 0x4d9756
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100715f0
push 0x5db4d5
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push 0x4d9749
call edi
lea eax, [ebp - 0x20]
mov byte [0x4d9749], 0xe0
push eax
push dword [ebp - 0x20]
push 1
push 0x4d9749
call edi
cmp dword [0x102c724c], 0
jne 0x1009f70a
push 0x10098720
push 0x80f833
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x80ff28
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x8100bb
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x810389
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x810659
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x80ffa7
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x81013a
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x810408
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x8106ea
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x80ff56
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x8100e9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x8103b7
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x810699
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098c00
push 0x80feef
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098c90
push 0x80fe56
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098d20
push 0x810083
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098db0
push 0x810354
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098e40
push 0x810624
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100995e0
push 0x8119e6
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098900
push 0x80f92d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100989d0
push 0x80f968
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ac0
push 0x80f9a3
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100989d0
push 0x80fa02
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x895a49
call edi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x895a49
call edi
push 0x10098ed0
push 0x895a49
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x895abe
call edi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x895abe
call edi
push 0x10098fd0
push 0x895abe
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x895b33
call edi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x895b33
call edi
push 0x100990c0
push 0x895b33
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x895ba8
call edi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x895ba8
call edi
push 0x100991b0
push 0x895ba8
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x812713
call edi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x812713
call edi
push 0x100992a0
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x812947
call edi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x812947
call edi
push 0x10099330
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x24
push 0x812a76
call edi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x24
push 0x812a76
call edi
push 0x100993c0
push 0x812a76
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x2d
push 0x8139a0
call edi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x2d
push 0x8139a0
call edi
push 0x10099450
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 0x2d
push 0x812d3f
call edi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x20]
push 0x2d
push 0x812d3f
call edi
push 0x10099540
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0xd27b20
call edi
lea eax, [ebp - 0x20]
mov dword [0xd27b20], 0x43a24ccd
push eax
push dword [ebp - 0x20]
push 4
push 0xd27b20
call edi
mov bl, byte [0x107e7b70]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 1
push 0x85c430
call edi
lea eax, [ebp - 0x20]
mov byte [0x85c430], bl
push eax
push dword [ebp - 0x20]
push 1
push 0x85c430
call edi
push 0x10099650
push 0x943d7f
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100996d0
push 0x942f09
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099750
push 0x8240a9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100997a0
push 0x82ac07
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099810
push 0x82b005
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099890
push 0x82b08b
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099900
push 0x82b100
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099970
push 0x82b339
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099970
push 0x82b3b7
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x82aaae
call edi
lea eax, [ebp - 0x20]
mov dword [0x82aaae], 0x337
push eax
push dword [ebp - 0x20]
push 4
push 0x82aaae
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0xd4ece0
call edi
lea eax, [ebp - 0x20]
mov dword [0xd4ece0], 0x44134000
push eax
push dword [ebp - 0x20]
push 4
push 0xd4ece0
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x94517c
call edi
lea eax, [ebp - 0x20]
mov dword [0x94517c], 0x24d
push eax
push dword [ebp - 0x20]
push 4
push 0x94517c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x42b037
call edi
lea eax, [ebp - 0x20]
mov dword [0x42b037], 0x255
push eax
push dword [ebp - 0x20]
push 4
push 0x42b037
call edi
mov esi, dword [0x107e7b70]
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81951d
call edi
lea eax, [ebp - 0x20]
mov dword [0x81951d], esi
push eax
push dword [ebp - 0x20]
push 4
push 0x81951d
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x819441
call edi
lea eax, [ebp - 0x20]
mov dword [0x819441], 0x2ce
push eax
push dword [ebp - 0x20]
push 4
push 0x819441
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x8192c7
call edi
lea eax, [ebp - 0x20]
mov dword [0x8192c7], 0x76
push eax
push dword [ebp - 0x20]
push 4
push 0x8192c7
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x8192e1
call edi
lea eax, [ebp - 0x20]
mov dword [0x8192e1], 0x148
push eax
push dword [ebp - 0x20]
push 4
push 0x8192e1
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x8192fb
call edi
lea eax, [ebp - 0x20]
mov dword [0x8192fb], 0x21a
push eax
push dword [ebp - 0x20]
push 4
push 0x8192fb
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81a5eb
call edi
lea eax, [ebp - 0x20]
mov dword [0x81a5eb], 0x235
push eax
push dword [ebp - 0x20]
push 4
push 0x81a5eb
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81a653
call edi
lea eax, [ebp - 0x20]
mov dword [0x81a653], 0x23d
push eax
push dword [ebp - 0x20]
push 4
push 0x81a653
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81a6e9
call edi
lea eax, [ebp - 0x20]
mov dword [0x81a6e9], 0x17e
push eax
push dword [ebp - 0x20]
push 4
push 0x81a6e9
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81a732
call edi
lea eax, [ebp - 0x20]
mov dword [0x81a732], 0x1df
push eax
push dword [ebp - 0x20]
push 4
push 0x81a732
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81a939
call edi
lea eax, [ebp - 0x20]
mov dword [0x81a939], 0x23d
push eax
push dword [ebp - 0x20]
push 4
push 0x81a939
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81a96c
call edi
lea eax, [ebp - 0x20]
mov dword [0x81a96c], 0x105
push eax
push dword [ebp - 0x20]
push 4
push 0x81a96c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81aa37
call edi
lea eax, [ebp - 0x20]
mov dword [0x81aa37], 0x199
push eax
push dword [ebp - 0x20]
push 4
push 0x81aa37
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x81aa91
call edi
lea eax, [ebp - 0x20]
mov dword [0x81aa91], 0x26c
push eax
push dword [ebp - 0x20]
push 4
push 0x81aa91
call edi
push 0x100997f0
push 0x81a9e8
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100999e0
push 0x823ca7
push 0xe9
call fcn.100bed50
add esp, 0xc
push 0x10099b50
push 0x7c57b9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b10
push 0x856486
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b10
push 0x85f1b9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d61ef
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d619e
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099af0
push 0x7d6150
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d6100
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099ad0
push 0x7d60b0
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099ab0
push 0x7d6060
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d601c
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099a90
push 0x7d5fce
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d5f7e
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099a70
push 0x7d5f30
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d5ee0
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099a50
push 0x7d5e92
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d5e42
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099a30
push 0x7d5df4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b30
push 0x7d5da4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099a10
push 0x7d5d56
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099be0
push 0x857746
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x5b97dc
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x5b984c
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x5b9904
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8c2e0f
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8c2e7f
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8cc713
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8cc788
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8d99b8
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8d9a2d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8ef47b
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8ef4ed
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8ef5c5
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x8ef65a
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x914fc9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b70
push 0x91503e
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10097960
push 0x834700
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b50
push 0x86d5c3
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b50
push 0x86d5f4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099b50
push 0x86d625
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d50
push 0x86e095
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d50
push 0x86e10d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86e01d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d00
push 0x86a4c4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d00
push 0x86a507
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f50
push 0x86e235
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f50
push 0x86e3fd
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f50
push 0x86e524
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f50
push 0x86dcfc
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099da0
push 0x86f25c
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099da0
push 0x86f298
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099da0
push 0x86f2d4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f70
push 0x86e3ad
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f70
push 0x86e4d4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f70
push 0x86e5f9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86e79f
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d50
push 0x86e830
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d50
push 0x86e861
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d50
push 0x86e8d2
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099d50
push 0x86e903
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86e6e9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86ea0b
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86eb03
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86ea7a
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86f0dc
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86ed1a
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86efaf
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86edcf
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86ec69
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86ef3c
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86ebb8
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099c70
push 0x86f218
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0xd494ac
call edi
lea eax, [ebp - 0x20]
mov dword [0xd494ac], 0x44420000
push eax
push dword [ebp - 0x20]
push 4
push 0xd494ac
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x86fd9b
call edi
lea eax, [ebp - 0x20]
mov dword [0x86fd9b], 0xf7
push eax
push dword [ebp - 0x20]
push 4
push 0x86fd9b
call edi
push 0x10099f90
push 0x7c058d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c05c8
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c0603
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bf4e8
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bf54f
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bfc87
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bfcca
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bfd44
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bfd8d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bfddf
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bfed2
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bff2e
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7bffc1
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c0029
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c0094
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c0168
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c01ab
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c0225
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c026e
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099f90
push 0x7c02c0
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099810
push 0x7bf8c4
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099810
push 0x7bf968
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099810
push 0x7bfa42
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099810
push 0x7bfafe
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10099810
push 0x7bfbb3
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1009a0f0
push 0x7bf299
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7bf44c
call edi
lea eax, [ebp - 0x20]
mov dword [0x7bf44c], 0x15b
push eax
push dword [ebp - 0x20]
push 4
push 0x7bf44c
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7bf47e
call edi
lea eax, [ebp - 0x20]
mov dword [0x7bf47e], 0x1c4
push eax
push dword [ebp - 0x20]
push 4
push 0x7bf47e
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x7bf25e
call edi
lea eax, [ebp - 0x20]
mov dword [0x7bf25e], 0x2c7
push eax
push dword [ebp - 0x20]
push 4
push 0x7bf25e
call edi
push 0x1001d530
push 0x4d9cdb
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x4283cb
call edi
lea eax, [ebp - 0x20]
mov dword [0x4283cb], 0x2a7
push eax
push dword [ebp - 0x20]
push 4
push 0x4283cb
call edi
lea eax, [ebp - 0x20]
push eax
push 0x40
push 4
push 0x428e88
call edi
lea eax, [ebp - 0x20]
mov dword [0x428e88], 0x2a7
push eax
push dword [ebp - 0x20]
push 4
push 0x428e88
call edi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100c0b64
mov esp, ebp
pop ebp
ret
call fcn.100c9e37
int3