Function at 0x1009a110
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
mov ebx, ecx
mov eax, 0x2710
push edi
mov edi, 1
mov dword [esp + 0x1c], ebx
mov edx, edi
mov dword [esp + 0x10], eax
mov dword [ebx], 0
mov esi, 0x64
nop dword [eax]
mov ecx, esi
imul ecx, edx
imul ecx, edx
mov dword [ebx + edx*4], ecx
cmp edx, 0xff
jle 0x1009a16c
imul eax, edi
imul eax, edi
inc edi
add eax, ecx
mov dword [ebx + edx*4], eax
mov eax, dword [esp + 0x10]
add eax, 0x3e8
mov dword [esp + 0x10], eax
add esi, 0xa
inc edx
cmp esi, 0xffa
jle 0x1009a140
mov dword [ebx + 0x648], 0
mov eax, 1
mov dword [ebx + 0x64c], 0
add ebx, 0x650
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], ebx
nop
add eax, 0x190
cdq
mov edi, eax
mov dword [esp + 0x10], eax
add edi, 0xffffff01
mov ebx, edx
mov esi, ebx
mov ecx, edi
adc esi, 0xffffffff
add ecx, 9
push esi
mov eax, esi
push edi
adc eax, 0
push eax
push ecx
call fcn.100e1390
push esi
push edi
push edx
push eax
call fcn.100e1390
mov ecx, eax
mov esi, 0x64
mov eax, edx
mul esi
push ebx
mov edi, eax
mov eax, ecx
mul esi
mov ecx, ebx
add edi, edx
mov esi, eax
mov eax, dword [esp + 0x14]
mov edx, eax
add edx, 9
push eax
adc ecx, 0
push ecx
push edx
call fcn.100e1390
push ebx
push dword [esp + 0x14]
push edx
push eax
call fcn.100e1390
add esi, eax
mov eax, esi
adc edi, edx
mov ecx, edi
shld ecx, eax, 2
shl eax, 2
add esi, eax
mov eax, dword [esp + 0x14]
adc edi, ecx
mov ecx, dword [esp + 0x18]
shld edi, esi, 1
add esi, esi
add esi, 0x1800fa70
adc edi, 0xffffffff
inc eax
shrd esi, edi, 1
mov dword [esp + 0x14], eax
shr edi, 1
mov dword [ecx], esi
mov dword [ecx + 4], edi
add ecx, 8
mov dword [esp + 0x18], ecx
cmp eax, 0x3e9
jl 0x1009a1a0
mov edi, dword [ebp + 8]
mov esi, dword [esp + 0x1c]
test edi, edi
jne 0x1009a26b
mov ecx, esi
call fcn.1009d560
mov ecx, dword [0x102c724c]
test ecx, ecx
jne 0x1009a8b0
push ecx
push ecx
call fcn.1002bab0
call fcn.10019f80
push 0x10098130
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
cmp byte [esi + 0x25b8], 0
je 0x1009ce42
push 0x10098ba0
push 0x80ff28
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x8100bb
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x810389
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ba0
push 0x810659
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x80ffa7
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x81013a
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x810408
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098be0
push 0x8106ea
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x80ff56
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x8100e9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x8103b7
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098b80
push 0x810699
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098c00
push 0x80feef
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098c90
push 0x80fe56
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098d20
push 0x810083
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098db0
push 0x810354
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098e40
push 0x810624
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100995e0
push 0x8119e6
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098900
push 0x80f92d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100989d0
push 0x80f968
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10098ac0
push 0x80f9a3
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100989d0
push 0x80fa02
push 0xe8
call fcn.100bed50
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [esp + 0x28]
add esp, 0xc
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10098ed0
push 0x895a49
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x10098fd0
push 0x895abe
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100990c0
push 0x895b33
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100991b0
push 0x895ba8
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x100992a0
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10099330
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100993c0
push 0x812a76
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10099450
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10099540
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ecx - 1]
cmp eax, 2
ja 0x1009b22f
mov eax, dword [0x107e7b70]
movss xmm3, dword [0x100f1cfc]
movss xmm4, dword [0x100f1d7c]
mov dword [0x102a57b8], 0
movd xmm2, eax
mov word [0x102a57bc], 0
mov dword [0x102a579c], 0x7a98
mov dword [0x102a57a0], 0x41c00000
mov dword [0x102a57a4], 0x41c00000
mov dword [0x102a57ac], 0x43e20000
mov dword [0x102a57b4], 0x43ee0000
mov byte [0x102a57be], 0
mov dword [0x102a5818], 0
mov word [0x102a581c], 0
mov dword [0x102a57fc], 0x7a95
mov dword [0x102a5800], 0x41c00000
mov dword [0x102a5804], 0x41c00000
mov dword [0x102a580c], 0x43e20000
mov dword [0x102a5814], 0x43ee0000
mov byte [0x102a581e], 0
mov dword [0x102a5878], 0
mov word [0x102a587c], 0
mov dword [0x102a585c], 0x7a97
mov dword [0x102a5860], 0x41c00000
mov dword [0x102a5864], 0x41c00000
mov dword [0x102a586c], 0x43e20000
mov dword [0x102a5874], 0x43ee0000
mov byte [0x102a587e], 0
mov dword [0x102a5998], 0
mov word [0x102a599c], 0
mov dword [0x102a597c], 0x7aa2
mov dword [0x102a5980], 0x42580000
mov dword [0x102a5984], 0x41a00000
mov dword [0x102a598c], 0x43e58000
mov dword [0x102a5994], 0x43ef8000
mov byte [0x102a599e], 0
cvtdq2pd xmm2, xmm2
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1b40]
cvtpd2ps xmm1, xmm0
movaps xmm0, xmm2
movss dword [0x102a57a8], xmm1
addss xmm1, xmm3
addsd xmm0, qword [0x100f1b58]
movss dword [0x102a57b0], xmm1
cvtpd2ps xmm0, xmm0
movss dword [0x102a5808], xmm0
addss xmm0, xmm3
movss dword [0x102a5810], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1b80]
cvtpd2ps xmm0, xmm0
movss dword [0x102a5868], xmm0
addss xmm0, xmm3
movss dword [0x102a5870], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c50]
cvtpd2ps xmm1, xmm0
movss dword [0x102a5988], xmm1
addss xmm1, xmm4
movss dword [0x102a5990], xmm1
cmp ecx, 2
jb 0x1009ab81
movaps xmm0, xmm2
mov dword [0x102a59f8], 0
addsd xmm0, qword [0x100f1c48]
add eax, 5
mov word [0x102a59fc], 0
mov dword [0x102a59dc], 0x7aa2
mov dword [0x102a59e0], 0x42580000
mov dword [0x102a59e4], 0x41a00000
cvtpd2ps xmm1, xmm0
mov dword [0x102a59ec], 0x43d80000
mov dword [0x102a59f4], 0x43e20000
mov byte [0x102a59fe], 0
mov dword [0x102a5938], 0
mov word [0x102a593c], 0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov dword [0x102a591c], 0x7aa2
mov dword [0x102a5920], 0x425c0000
mov dword [0x102a5924], 0x41a80000
mov dword [0x102a592c], 0x43d80000
movss dword [0x102a59e8], xmm1
addss xmm1, xmm4
movss dword [0x102a5928], xmm0
addss xmm0, dword [0x100f1d80]
mov dword [0x102a5934], 0x43e28000
mov byte [0x102a593e], 0
movss dword [0x102a59f0], xmm1
movss dword [0x102a5930], xmm0
cmp ecx, 3
jb 0x1009abf2
addsd xmm2, qword [0x100f1ba0]
mov dword [0x102a58d8], 0
mov word [0x102a58dc], 0
mov dword [0x102a58bc], 0x7aa2
mov dword [0x102a58c0], 0x41c00000
cvtpd2ps xmm0, xmm2
mov dword [0x102a58c4], 0x41c00000
mov dword [0x102a58cc], 0x43e20000
mov dword [0x102a58d4], 0x43ee0000
mov byte [0x102a58de], 0
movss dword [0x102a58c8], xmm0
addss xmm0, xmm3
movss dword [0x102a58d0], xmm0
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x1c]
mov byte [0x813c1a], 0x1e
push eax
push dword [esp + 0x20]
push 1
push 0x813c1a
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x1c]
mov byte [0x812ad5], 0
push eax
push dword [esp + 0x20]
push 1
push 0x812ad5
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x813740
call esi
lea eax, [esp + 0x1c]
mov byte [0x813740], 0xc3
push eax
push dword [esp + 0x20]
push 1
push 0x813740
call esi
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10094850
push 0x80f7fe
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100953b0
push 0x80f833
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10095460
push 0x80f845
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100957f0
push 0x80f84d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10095980
push 0x80f855
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10095b10
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10095fa0
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10096030
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100960c0
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10096160
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x10091230
push 0x813cbc
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100912c0
push 0x8130aa
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10096200
push 0x895a49
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100962f0
push 0x895abe
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100963e0
push 0x895b33
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10092c30
push 0x895ba8
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd43668
call esi
lea eax, [esp + 0x1c]
mov dword [0xd43668], 0x43d78000
push eax
push dword [esp + 0x20]
push 4
push 0xd43668
call esi
push 0x10096a50
push 0x7db308
push 0xe9
call fcn.100bed50
add esp, 0xc
push 0x10096a70
push 0x7db5d0
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x1c]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x20]
push 1
push 0x4d9749
call esi
push edi
push 1
call fcn.1002bab0
jmp 0x1009cc95
cmp ecx, 4
jne 0x1009b60a
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1008cec0
push 0x80f7fe
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1008cf00
push 0x80f833
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1008f250
push 0x80f84d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1008f590
push 0x80f855
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1008f890
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10090f30
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10090fd0
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x10091060
push 0x812a76
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x100910f0
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x10091190
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x10091230
push 0x813cbc
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100912c0
push 0x8130aa
push 0xe9
call fcn.100bed50
add esp, 0xc
push 0x10097ce0
push 0x89599e
push 0xe8
jmp 0x1009cc63
cmp ecx, 5
jne 0x1009be5f
movd xmm2, dword [0x107e7b70]
cvtdq2pd xmm2, xmm2
mov dword [0x102a58d8], 0
mov word [0x102a58dc], 0
mov dword [0x102a58bc], 0x7abc
mov dword [0x102a58c0], 0x41a00000
mov dword [0x102a58c4], 0x41a00000
movss xmm3, dword [0x100f1ce8]
movaps xmm0, xmm2
mov dword [0x102a58cc], 0x43e10000
addsd xmm0, qword [0x100f18c0]
mov dword [0x102a58d4], 0x43eb0000
mov byte [0x102a58de], 0
mov dword [0x102a5818], 0
mov word [0x102a581c], 0
cvtpd2ps xmm1, xmm0
mov dword [0x102a57fc], 0x7abf
mov dword [0x102a5800], 0x41a00000
mov dword [0x102a5804], 0x41a00000
mov dword [0x102a580c], 0x43e10000
mov dword [0x102a5814], 0x43eb0000
movaps xmm0, xmm2
mov byte [0x102a581e], 0
addsd xmm0, qword [0x100f1940]
movss dword [0x102a58c8], xmm1
addss xmm1, xmm3
mov dword [0x102a5878], 0
mov word [0x102a587c], 0
mov dword [0x102a585c], 0x7ac1
cvtpd2ps xmm0, xmm0
mov dword [0x102a5860], 0x41a00000
mov dword [0x102a5864], 0x41a00000
mov dword [0x102a586c], 0x43e10000
mov dword [0x102a5874], 0x43eb0000
mov byte [0x102a587e], 0
movss dword [0x102a58d0], xmm1
movss dword [0x102a5808], xmm0
addss xmm0, xmm3
mov dword [0x102a5a58], 0
mov word [0x102a5a5c], 0
mov dword [0x102a5a3c], 0x7ac2
mov dword [0x102a5a40], 0x41a00000
movss dword [0x102a5810], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1980]
mov dword [0x102a5a44], 0x41a00000
mov dword [0x102a5a4c], 0x43e10000
mov dword [0x102a5a54], 0x43eb0000
mov byte [0x102a5a5e], 0
cvtpd2ps xmm0, xmm0
mov dword [0x102a59f8], 0
mov word [0x102a59fc], 0
mov dword [0x102a59dc], 0x7ac3
mov dword [0x102a59e0], 0x41a00000
mov dword [0x102a59e4], 0x41a00000
mov dword [0x102a59ec], 0x43e10000
movss dword [0x102a5868], xmm0
addss xmm0, xmm3
mov dword [0x102a59f4], 0x43eb0000
mov byte [0x102a59fe], 0
mov dword [0x102a5938], 0
mov word [0x102a593c], 0
movss dword [0x102a5870], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c10]
mov dword [0x102a591c], 0x7aa2
mov dword [0x102a5920], 0x41a00000
mov dword [0x102a5924], 0x41a00000
cvtpd2ps xmm0, xmm0
movss dword [0x102a5a48], xmm0
addss xmm0, xmm3
movss dword [0x102a5a50], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c20]
addsd xmm2, qword [0x100f1c38]
cvtpd2ps xmm0, xmm0
movss dword [0x102a59e8], xmm0
addss xmm0, xmm3
movss dword [0x102a59f0], xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x102a5928], xmm0
addss xmm0, xmm3
mov dword [0x102a592c], 0x43e10000
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
mov dword [0x102a5934], 0x43eb0000
movss dword [0x102a5930], xmm0
mov byte [0x102a593e], 0
call fcn.100bed50
add esp, 0xc
push 0x1008cec0
push 0x80f7fe
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10091350
push 0x80f833
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10091e40
push 0x80f84d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10091fd0
push 0x80f855
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10092150
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10092550
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x100925e0
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x10092670
push 0x812a76
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10092700
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100927a0
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x10092840
push 0x813cbc
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x100928d0
push 0x8130aa
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10092960
push 0x895a49
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x10092a50
push 0x895abe
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x10092b40
push 0x895b33
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10092d20
jmp 0x1009cc59
cmp ecx, 6
jne 0x1009c6b4
movd xmm2, dword [0x107e7b70]
cvtdq2pd xmm2, xmm2
mov dword [0x102a58d8], 0
mov word [0x102a58dc], 0
mov dword [0x102a58bc], 0x7abc
mov dword [0x102a58c0], 0x41a00000
mov dword [0x102a58c4], 0x41a00000
movss xmm3, dword [0x100f1ce8]
movaps xmm0, xmm2
mov dword [0x102a58cc], 0x43e10000
addsd xmm0, qword [0x100f18c0]
mov dword [0x102a58d4], 0x43eb0000
mov byte [0x102a58de], 0
mov dword [0x102a5818], 0
mov word [0x102a581c], 0
cvtpd2ps xmm1, xmm0
mov dword [0x102a57fc], 0x7abf
mov dword [0x102a5800], 0x41a00000
mov dword [0x102a5804], 0x41a00000
mov dword [0x102a580c], 0x43e10000
mov dword [0x102a5814], 0x43eb0000
movaps xmm0, xmm2
mov byte [0x102a581e], 0
addsd xmm0, qword [0x100f1940]
movss dword [0x102a58c8], xmm1
addss xmm1, xmm3
mov dword [0x102a5878], 0
mov word [0x102a587c], 0
mov dword [0x102a585c], 0x7ac1
cvtpd2ps xmm0, xmm0
mov dword [0x102a5860], 0x41a00000
mov dword [0x102a5864], 0x41a00000
mov dword [0x102a586c], 0x43e10000
mov dword [0x102a5874], 0x43eb0000
mov byte [0x102a587e], 0
movss dword [0x102a58d0], xmm1
movss dword [0x102a5808], xmm0
addss xmm0, xmm3
mov dword [0x102a5a58], 0
mov word [0x102a5a5c], 0
mov dword [0x102a5a3c], 0x7ac2
mov dword [0x102a5a40], 0x41a00000
movss dword [0x102a5810], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1980]
mov dword [0x102a5a44], 0x41a00000
mov dword [0x102a5a4c], 0x43e10000
mov dword [0x102a5a54], 0x43eb0000
mov byte [0x102a5a5e], 0
cvtpd2ps xmm0, xmm0
mov dword [0x102a59f8], 0
mov word [0x102a59fc], 0
mov dword [0x102a59dc], 0x7ac3
mov dword [0x102a59e0], 0x41a00000
mov dword [0x102a59e4], 0x41a00000
mov dword [0x102a59ec], 0x43e10000
movss dword [0x102a5868], xmm0
addss xmm0, xmm3
mov dword [0x102a59f4], 0x43eb0000
mov byte [0x102a59fe], 0
mov dword [0x102a5938], 0
mov word [0x102a593c], 0
movss dword [0x102a5870], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c10]
mov dword [0x102a591c], 0x7aa2
mov dword [0x102a5920], 0x41a00000
mov dword [0x102a5924], 0x41a00000
cvtpd2ps xmm0, xmm0
movss dword [0x102a5a48], xmm0
addss xmm0, xmm3
movss dword [0x102a5a50], xmm0
movaps xmm0, xmm2
addsd xmm0, qword [0x100f1c20]
addsd xmm2, qword [0x100f1c38]
cvtpd2ps xmm0, xmm0
movss dword [0x102a59e8], xmm0
addss xmm0, xmm3
movss dword [0x102a59f0], xmm0
cvtpd2ps xmm0, xmm2
movss dword [0x102a5928], xmm0
addss xmm0, xmm3
mov dword [0x102a592c], 0x43e10000
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
mov dword [0x102a5934], 0x43eb0000
movss dword [0x102a5930], xmm0
mov byte [0x102a593e], 0
call fcn.100bed50
add esp, 0xc
push 0x1008cec0
push 0x80f7fe
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10092e10
push 0x80f833
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10093900
push 0x80f84d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10093a90
push 0x80f855
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10093c10
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10094080
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10094110
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100941a0
push 0x812a76
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10094230
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100942d0
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x10094370
push 0x813cbc
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10094400
push 0x8130aa
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x10094490
push 0x895a49
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x10094580
push 0x895abe
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x10094670
push 0x895b33
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x10094760
jmp 0x1009cc59
cmp ecx, 7
jne 0x1009cc75
push sym.Main.dll_SetWidePosY
push 0x80f258
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1008cec0
push 0x80f7fe
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10097040
push 0x80f833
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f845
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f84d
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f855
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f85d
push 0xe8
call fcn.100bed50
add esp, 0xc
push sym.Main.dll_SetWidePosY
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812713
call esi
mov eax, 0x812713
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812713
call esi
push 0x10094080
push 0x812713
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812947
call esi
mov eax, 0x812947
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812947
call esi
push 0x10094110
push 0x812947
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x812a76
call esi
mov eax, 0x812a76
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x812a76
call esi
push 0x100941a0
push 0x812a76
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x8139a0
call esi
push 0x2d
push 0x90
push 0x8139a0
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x8139a0
call esi
push 0x10094230
push 0x8139a0
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x2d
push 0x812d3f
call esi
push 0x2d
push 0x90
push 0x812d3f
call fcn.100c2d20
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x2d
push 0x812d3f
call esi
push 0x100942d0
push 0x812d3f
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x813cbc
call esi
mov eax, 0x813cbc
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x813cbc
call esi
push 0x10094370
push 0x813cbc
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x8130aa
call esi
mov eax, 0x8130aa
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x8130aa
call esi
push 0x10094400
push 0x8130aa
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895a49
call esi
mov eax, 0x895a49
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895a49
call esi
push 0x100970e0
push 0x895a49
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895abe
call esi
mov eax, 0x895abe
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895abe
call esi
push 0x100971d0
push 0x895abe
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895b33
call esi
mov eax, 0x895b33
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895b33
call esi
push 0x100972c0
push 0x895b33
push 0xe9
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 0x24
push 0x895ba8
call esi
mov eax, 0x895ba8
mov dword [eax], 0x90909090
mov dword [eax + 4], 0x90909090
mov dword [eax + 8], 0x90909090
mov dword [eax + 0xc], 0x90909090
mov dword [eax + 0x10], 0x90909090
mov dword [eax + 0x14], 0x90909090
mov dword [eax + 0x18], 0x90909090
mov dword [eax + 0x1c], 0x90909090
mov dword [eax + 0x20], 0x90909090
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x20]
push 0x24
push 0x895ba8
call esi
push 0x100973b0
push 0x895ba8
push 0xe9
call fcn.100bed50
add esp, 0xc
push edi
push 2
call fcn.1002bab0
jmp 0x1009cc95
push 0
push 0
call fcn.1002bab0
push 0x10098130
push 0x80f865
push 0xe8
call fcn.100bed50
add esp, 0xc
mov eax, dword [0x102c724c]
add eax, 0xfffffffc
cmp eax, 3
ja 0x1009ce3d
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd43848
call esi
lea eax, [esp + 0x1c]
mov dword [0xd43848], 0x42c66666
push eax
push dword [esp + 0x20]
push 4
push 0xd43848
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 1
push 0x4d9749
call esi
lea eax, [esp + 0x1c]
mov byte [0x4d9749], 0xe0
push eax
push dword [esp + 0x20]
push 1
push 0x4d9749
call esi
push 0x100715f0
push 0x40f2e9
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100715f0
push 0x48007c
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100715f0
push 0x4d9756
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x100715f0
push 0x5db4d5
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10097ca0
push 0x81a146
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x10097ca0
push 0x81a199
push 0xe8
call fcn.100bed50
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd46924
call esi
lea eax, [esp + 0x1c]
mov dword [0xd46924], 0x43f00000
push eax
push dword [esp + 0x20]
push 4
push 0xd46924
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 8
push 0xd46910
call esi
movsd xmm0, qword [0x100f1bd8]
lea eax, [esp + 0x1c]
push eax
movsd qword [0xd46910], xmm0
push dword [esp + 0x20]
push 8
push 0xd46910
call esi
lea eax, [esp + 0x1c]
push eax
push 0x40
push 4
push 0xd2c2a0
call esi
lea eax, [esp + 0x1c]
mov dword [0xd2c2a0], 0x43f00000
push eax
push dword [esp + 0x20]
push 4
push 0xd2c2a0
call esi
push 0x10097960
push 0x834700
push 0xe8
call fcn.100bed50
add esp, 0xc
push 0x1001d530
push 0x4d9cdb
push 0xe8
call fcn.100bed50
add esp, 0xc
call fcn.10019f80
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4